{"id":115650,"date":"2024-05-09T13:52:08","date_gmt":"2024-05-09T11:52:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx"},"modified":"2024-05-09T13:52:08","modified_gmt":"2024-05-09T11:52:08","slug":"v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","title":{"rendered":"\u00cen Rustls a fost asigurat\u0103 compatibilitatea cu OpenSSL \u0219i nginx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Organiza\u021bia ISRG (Internet Security Research Group), care este fondatoarea proiectului Let’s Encrypt \u0219i contribuie la dezvoltarea tehnologiilor pentru cre\u0219terea securit\u0103\u021bii internetului, a anun\u021bat publicarea unei straturi rustls-openssl-compat, care permite utilizarea bibliotecii Rustls ca un \u00eenlocuitor transparent pentru OpenSSL. \u00cen prezent, proiectul ofer\u0103 o implementare rustls-libssl, care asigur\u0103 compatibilitate cu libssl, iar o implementare libcrypto este \u00een dezvoltare. <\/p>\n

Func\u021bionalitatea prezent\u0103 \u00een stratul respectiv este suficient\u0103 pentru a asigura func\u021bionarea nginx-ului pe baza Rustls. Pentru a migra nginx-ul pe Rustls, trebuie doar s\u0103 se \u00eenlocuiasc\u0103 bibliotecile, f\u0103r\u0103 a fi necesar\u0103 recompilarea sau modificarea nginx-ului. Printre planurile imediate pentru dezvoltarea Rustls se num\u0103r\u0103 optimizarea performan\u021bei \u00een domeniile \u00een care Rustls este \u00een urm\u0103 fa\u021b\u0103 de OpenSSL \u0219i asigurarea suportului pentru RFC 8879 pentru comprimarea certificatelor. De asemenea, \u00een anun\u021b s-a men\u021bionat planul de a migra elementele infrastructurii autorit\u0103\u021bii de certificare Let’s Encrypt de la OpenSSL la Rustls. <\/p>\n

Proiectul Rustls dezvolt\u0103 implement\u0103ri client \u0219i server pentru protocoalele TLS1.2 \u0219i TLS1.3, destinate utiliz\u0103rii \u00een aplica\u021bii scrise \u00een Rust. Rustls nu ofer\u0103 o implementare proprie a primitivelor criptografice, ci utilizeaz\u0103 furnizori de criptografie externi (sunt sus\u021binute algoritmi ECDSA, Ed25519, RSA, ChaCha20-Poly1305, AES128-GCM \u0219i AES256-GCM). Implicit, Rustls folose\u0219te un furnizor de criptografie bazat pe biblioteca aws-lc-rs, care este dezvoltat\u0103 de compania Amazon \u0219i se bazeaz\u0103 pe cod C++ de la BoringSSL, men\u021binut de fork-ul Google al OpenSSL. Ca furnizor de criptografie, poate fi utilizat\u0103 \u0219i biblioteca ring, care se bazeaz\u0103 par\u021bial pe BoringSSL \u0219i combin\u0103 cod C, C++ \u0219i Rust. <\/p>\n

Este demn de remarcat c\u0103 nginx are suport \u00eencorporat pentru compilarea cu BoringSSL, ceea ce permite utilizarea direct\u0103 a acestei biblioteci f\u0103r\u0103 straturi intermediare. \u00cen plus fa\u021b\u0103 de suportul \u00eencorporat \u00een Rustls pentru bibliotecile aws-lc-rs \u0219i ring, bazate pe codul BoringSSL, pentru Rustls se dezvolt\u0103, de asemenea, mai mul\u021bi furnizori de criptografie ter\u021bi, care permit utilizarea bibliotecilor mbedtls (cod C), BoringSSL (C++) \u0219i RustCrypto (Rust).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f ISRG (Internet Security Research Group), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0447\u0440\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Let’s Encrypt \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u0435\u0442 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 rustls-openssl-compat, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Rustls \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u043d\u044b OpenSSL. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f rustls-libssl, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c \u0441 libssl, \u0430 \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f libcrypto. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0432 \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115650","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rustls asigur\u0103 compatibilitatea cu OpenSSL \u0219i nginx | ProHoster","description":"Organiza\u021bia ISRG (Internet Security Research Group), care este fondatoarea proiectului Let's Encrypt \u0219i sus\u021bine dezvoltarea tehnologiilor pentru cre\u0219terea securit\u0103\u021bii internetului, a anun\u021bat publicarea unui strat de compatibilitate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Rustls \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c \u0441 OpenSSL \u0438 nginx | ProHoster","og:description":"\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f ISRG (Internet Security Research Group), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0447\u0440\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Let's Encrypt \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u0443\u0435\u0442 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-09T11:52:08+00:00","article:modified_time":"2024-05-09T11:52:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115650","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 23:59:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 23:59:19","updated":"2026-01-22 23:59:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115650","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=115650"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115650\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=115650"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=115650"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=115650"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}