{"id":115650,"date":"2024-05-09T13:52:08","date_gmt":"2024-05-09T11:52:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx"},"modified":"2024-05-09T13:52:08","modified_gmt":"2024-05-09T11:52:08","slug":"v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","title":{"rendered":"Rustls siguron kompatibilitetin me OpenSSL dhe nginx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Organizata ISRG (Grupi i K\u00ebrkimeve p\u00ebr Sigurin\u00eb n\u00eb Internet), e cila \u00ebsht\u00eb themeluesi i projektit Let’s Encrypt dhe kontribuon n\u00eb zhvillimin e teknologjive p\u00ebr t\u00eb rritur sigurin\u00eb n\u00eb internet, njoftoi publikimin e nj\u00eb shtrese rustls-openssl-compat, q\u00eb lejon p\u00ebrdorimin e bibliotek\u00ebs Rustls si nj\u00eb z\u00ebvend\u00ebsim transparent p\u00ebr OpenSSL. Aktualisht, projekti ofron nj\u00eb implementim t\u00eb rustls-libssl, i cili siguron kompatibilitet me libssl, dhe \u00ebsht\u00eb n\u00eb zhvillim nj\u00eb implementim i libcrypto. <\/p>\n
Funksionaliteti i pranish\u00ebm n\u00eb shtres\u00eb \u00ebsht\u00eb mjaftuesh\u00ebm p\u00ebr t\u00eb siguruar funksionimin e nginx mbi baz\u00ebn e Rustls. P\u00ebr t\u00eb kaluar nginx n\u00eb Rustls, mjafton t\u00eb z\u00ebvend\u00ebsoni bibliotekat, pa pasur nevoj\u00eb p\u00ebr rind\u00ebrtim ose ndryshim t\u00eb nginx. Nd\u00ebr planet e af\u00ebrta p\u00ebr zhvillimin e Rustls, p\u00ebrmendet optimizimi i performanc\u00ebs n\u00eb fushat ku Rustls aktualisht mbetet pas OpenSSL, si dhe sigurimi i mb\u00ebshtetjes p\u00ebr RFC 8879 p\u00ebr kompresimin e certifikatave. P\u00ebr m\u00eb tep\u00ebr, n\u00eb njoftimin \u00ebsht\u00eb p\u00ebrmendur plani i kalimit t\u00eb elementeve t\u00eb infrastruktur\u00ebs s\u00eb qendr\u00ebs s\u00eb certifikimit Let’s Encrypt nga OpenSSL n\u00eb Rustls. <\/p>\n
Projekti Rustls zhvillon realizimin e klientit dhe serverit t\u00eb protokolleve TLS1.2 dhe TLS1.3 p\u00ebr t'u p\u00ebrdorur n\u00eb aplikacione n\u00eb gjuh\u00ebn Rust. Rustls nuk ofron nj\u00eb realizim t\u00eb vetin t\u00eb primitiveve kryptografike, por p\u00ebrdor ofrues t\u00eb mund\u00ebsive kryptografike (p\u00ebrkrah algoritmet ECDSA, Ed25519, RSA, ChaCha20-Poly1305, AES128-GCM dhe AES256-GCM). Si standard, n\u00eb Rustls p\u00ebrdoret ofruesi kryptografik i bazuar n\u00eb bibliotek\u00ebn aws-lc-rs, e cila zhvillohet nga kompania Amazon dhe bazohet n\u00eb kodin C++ t\u00eb BoringSSL, i mb\u00ebshtetur nga forka Google e OpenSSL. Si ofrues kryptografik mund t\u00eb p\u00ebrdoret gjithashtu biblioteka ring, e cila \u00ebsht\u00eb pjes\u00ebrisht e bazuar n\u00eb BoringSSL dhe kombinon kodin n\u00eb assembler, C++ dhe Rust. <\/p>\n
\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se nginx ka mb\u00ebshtetje t\u00eb brendshme p\u00ebr nd\u00ebrtimin me BoringSSL, q\u00eb lejon p\u00ebrdorimin e k\u00ebsaj biblioteke drejtp\u00ebrdrejt pa shtresa t\u00eb panevojshme. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, p\u00ebrve\u00e7 mb\u00ebshtetjes t\u00eb integruar n\u00eb Rustls p\u00ebr bibliotekat aws-lc-rs dhe ring, t\u00eb cilat bazohen n\u00eb kodin BoringSSL, p\u00ebr Rustls po zhvillohen gjithashtu disa ofrues indirekt kryptografik\u00eb, q\u00eb lejojn\u00eb p\u00ebrdorimin e bibliotekave mbedtls (kod n\u00eb C), BoringSSL (C++) dhe RustCrypto (Rust). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"