{"id":115650,"date":"2024-05-09T13:52:08","date_gmt":"2024-05-09T11:52:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx"},"modified":"2024-05-09T13:52:08","modified_gmt":"2024-05-09T11:52:08","slug":"v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","title":{"rendered":"N\u00eb Rustls \u00ebsht\u00eb siguruar p\u00ebrputhshm\u00ebria me OpenSSL dhe nginx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Organizata ISRG (Internet Security Research Group), e cila \u00ebsht\u00eb themeluesi i projektit Let’s Encrypt dhe kontribuon n\u00eb zhvillimin e teknologjive p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar sigurin\u00eb n\u00eb internet, shpalli publikimin e nj\u00eb shtrese rustls-openssl-compat, e cila lejon p\u00ebrdorimin e bibliotek\u00ebs Rustls si nj\u00eb z\u00ebvend\u00ebsim t\u00eb transparenc\u00ebs p\u00ebr OpenSSL. Aktualisht, projekti ofron nj\u00eb implementim rustls-libssl, i cili siguron kompatibilitet me libssl, dhe \u00ebsht\u00eb duke u zhvilluar nj\u00eb implementim i libcrypto. <\/p>\n
Funksionaliteti i pranish\u00ebm n\u00eb k\u00ebt\u00eb shtres\u00eb \u00ebsht\u00eb i mjaftuesh\u00ebm p\u00ebr t\u00eb siguruar funksionimin e nginx mbi Rustls. P\u00ebr t\u00eb kaluar nginx n\u00eb Rustls thjesht duhet t\u00eb z\u00ebvend\u00ebsohen bibliotekat, pa nevoj\u00ebn p\u00ebr rind\u00ebrtim ose ndryshim t\u00eb nginx. Nga planet e ardhshme p\u00ebr zhvillimin e Rustls, do t\u00eb theksohet optimizimi i performanc\u00ebs n\u00eb fushat ku Rustls ende mbetet pas OpenSSL, si dhe sigurimi i mb\u00ebshtetjes p\u00ebr RFC 8879 p\u00ebr kompresimin e certifikatave. P\u00ebr m\u00eb tep\u00ebr, n\u00eb njoftim u p\u00ebrmend plani p\u00ebr t\u00eb transferuar element\u00ebt e infrastruktur\u00ebs s\u00eb autoritetit t\u00eb certifikimit Let’s Encrypt nga OpenSSL n\u00eb Rustls. <\/p>\n
Projekti Rustls zhvillon implementimin e klientit dhe serverit t\u00eb protokolleve TLS1.2 dhe TLS1.3 p\u00ebr t'u p\u00ebrdorur n\u00eb aplikacione t\u00eb gjuh\u00ebs Rust. Rustls nuk ofron nj\u00eb implementim t\u00eb vetin t\u00eb primitiveve kriptografike, por p\u00ebrdor provajder\u00eb t\u00eb lidhur t\u00eb funksioneve kriptografike (p\u00ebrkrah algoritmet ECDSA, Ed25519, RSA, ChaCha20-Poly1305, AES128-GCM dhe AES256-GCM). Me default, n\u00eb Rustls p\u00ebrdoret nj\u00eb provajder kriptografik i bazuar n\u00eb bibliotek\u00ebn aws-lc-rs, e cila zhvillohet nga kompania Amazon dhe bazohet n\u00eb kodin C++ t\u00eb BoringSSL, q\u00eb mb\u00ebshtetet nga fork-u i OpenSSL nga Google. Si provajder kriptografik mund t\u00eb p\u00ebrdoret gjithashtu biblioteka ring, e cila \u00ebsht\u00eb pjes\u00ebrisht e bazuar n\u00eb BoringSSL dhe kombinon kodin n\u00eb assemble, C++ dhe Rust. <\/p>\n
\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se nginx ka mb\u00ebshtetje t\u00eb nd\u00ebrtimit t\u00eb integruar me BoringSSL, e cila lejon p\u00ebrdorimin e k\u00ebsaj biblioteke direkt pa shtresa t\u00eb tjera t\u00eb panevojshme. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, p\u00ebrve\u00e7 mb\u00ebshtetjes t\u00eb integruar n\u00eb Rustls p\u00ebr bibliotekat aws-lc-rs dhe ring, t\u00eb gjitha t\u00eb bazuara n\u00eb kodin BoringSSL, p\u00ebr Rustls po zhvillohen gjithashtu disa provajder\u00eb t\u00eb huaj t\u00eb kriptografis\u00eb, q\u00eb lejojn\u00eb p\u00ebrdorimin e bibliotekave mbedtls (kod n\u00eb C), BoringSSL (C++) dhe RustCrypto (Rust). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"