{"id":101224,"date":"2021-09-08T16:23:07","date_gmt":"2021-09-08T14:23:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0"},"modified":"2021-09-08T16:23:07","modified_gmt":"2021-09-08T14:23:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0","title":{"rendered":"L\u00ebshimi i bibliotek\u00ebs kriptografike OpenSSL 3.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Pas tri vjet\u00ebsh zhvillimi dhe 19 l\u00ebshimeve testuese, u realizua l\u00ebshimi i bibliotek\u00ebs OpenSSL 3.0.0 me implementimin e protokolleve SSL\/TLS dhe algoritmeve t\u00eb ndrysh\u00ebm t\u00eb enkriptimit. Dega e re p\u00ebrmban ndryshime q\u00eb shkelin prapavij\u00ebn e pajtueshm\u00ebris\u00eb n\u00eb nivelin API dhe ABI, por k\u00ebto ndryshime nuk do t\u00eb ndikojn\u00eb n\u00eb funksionimin e shumic\u00ebs s\u00eb aplikacioneve, p\u00ebr t\u00eb cilat kalimi nga OpenSSL 1.1.1 k\u00ebrkon vet\u00ebm rind\u00ebrtimin. Mb\u00ebshtetja p\u00ebr deg\u00ebn e kaluar OpenSSL 1.1.1 do t\u00eb vazhdoj\u00eb deri n\u00eb shtator 2023. <\/p>\n
Nj\u00eb ndryshim tjet\u00ebr i r\u00ebnd\u00ebsish\u00ebm p\u00ebr projektin ishte kalimi nga licenca e dyfisht\u00eb (OpenSSL dhe SSLeay) n\u00eb licenc\u00ebn Apache 2.0. Licenca e m\u00ebparshme e pronarit t\u00eb OpenSSL ishte bazuar n\u00eb tekstin e nj\u00eb licence t\u00eb vjet\u00ebruar Apache 1.0 dhe k\u00ebrkonte p\u00ebrmendje t\u00eb qart\u00eb t\u00eb OpenSSL n\u00eb materialet reklamues n\u00eb rast p\u00ebrdorimi t\u00eb bibliotekave OpenSSL, si dhe shtimin e nj\u00eb sh\u00ebnimi t\u00eb ve\u00e7ant\u00eb n\u00eb rast ofrimi t\u00eb OpenSSL si pjes\u00eb e produktit. K\u00ebto k\u00ebrkesa e b\u00ebn\u00eb licenc\u00ebn e vjet\u00ebr t\u00eb papajtueshme me GPL, e cila krijoi v\u00ebshtir\u00ebsi n\u00eb p\u00ebrdorimin e OpenSSL n\u00eb projekte me licenc\u00eb GPL. P\u00ebr t\u00eb shmangur k\u00ebt\u00eb papajtueshm\u00ebri, projektet GPL ishin t\u00eb detyruara t\u00eb p\u00ebrdorin marr\u00ebveshje specifike licencash, ku teksti kryesor i GPL u plot\u00ebsua me nj\u00eb klauzol\u00eb q\u00eb lejonte qartazi lidhjen e aplikacionit me bibliotek\u00ebn OpenSSL dhe p\u00ebrmendte se k\u00ebrkesat e GPL nuk zbatoheshin p\u00ebr lidhjen me OpenSSL. <\/p>\n
N\u00eb krahasim me deg\u00ebn OpenSSL 1.1.1, n\u00eb OpenSSL 3.0.0 jan\u00eb shtuar m\u00eb shum\u00eb se 7500 ndryshime, t\u00eb p\u00ebrgatitura nga 350 zhvillues. Novitetet kryesore t\u00eb OpenSSL 3.0.0: <\/p>\n
\n
\u00cbsht\u00eb propozuar nj\u00eb modul i ri FIPS, q\u00eb p\u00ebrfshin implementimin e algoritmeve kriptografike q\u00eb i p\u00ebrmbahen standardit t\u00eb siguris\u00eb FIPS 140-2 (kjo muaj planifikohet t\u00eb filloj\u00eb procesin e certifikimit t\u00eb modulit, me pritshm\u00ebrin\u00eb p\u00ebr t\u00eb marr\u00eb certifikat\u00ebn FIPS 140-2 vitin tjet\u00ebr). Moduli i ri \u00ebsht\u00eb duksh\u00ebm m\u00eb i leht\u00eb p\u00ebr t'u p\u00ebrdorur dhe lidhja e tij me shum\u00eb aplikacione do t\u00eb jet\u00eb po aq e thjesht\u00eb sa nd\u00ebrrimi i skedarit t\u00eb konfigurimit. P\u00ebrve\u00e7 k\u00ebsaj, moduli FIPS \u00ebsht\u00eb i \u00e7aktivizuar si parazgjedhje dhe k\u00ebrkon specifikimin e opsionit enable-fips p\u00ebr aktivizim.\n
N\u00eb libcrypto \u00ebsht\u00eb realizuar koncepti i ofruesve t\u00eb pluggable, i cili z\u00ebvend\u00ebson konceptin e motor\u00ebve (API i ENGINE \u00ebsht\u00eb shpallur i vjet\u00ebruar). P\u00ebrmes ofruesve mund t\u00eb shtoni implementime t\u00eb veta t\u00eb algoritmeve p\u00ebr operacione t\u00eb tilla si enkriptimi, dekryptimi, krijimi i \u00e7elsave, llogaritja e MAC, krijimi dhe verifikimi i n\u00ebnshkrimeve digjitale. \u00cbsht\u00eb e mundur si lidhja e t\u00eb rejave ashtu edhe krijimi i alternativeve t\u00eb implementimeve t\u00eb algoritmeve tashm\u00eb t\u00eb mb\u00ebshtetur (si parazgjedhje, tani p\u00ebr \u00e7do algorit\u00ebm p\u00ebrdoret ofruesi i integruar n\u00eb OpenSSL).\n