红联Linux门户
Linux帮助

PolarSSL 1.3.1发布,SSL加密库

发布时间:2013-10-24 11:27:37来源:红联作者:empast
轻量级SSL库PolarSSL发布1.3.1.2013-10-16。上个版本2013-10-03的1.3.0。遗留产品系列1.2.10/1.1.8 越来越多重量级的应用已经支持PolarSSL如hiawatha,OpenVPN。

完全改进:

This release introduces a few new features. First, it adds support for the Brainpool Elliptic Curves (and their use in SSL ciphersuites) as defined in the new RFC 7027. After all the talk about possible involvement of the NSA in the NIST curves, we wanted to offer an alternative as soon as possible. As far as we know this is the first library to release a version with support for these curves that are not influenced by NIST or the NSA.

In addition we have added support for the ECDHE-PSK and RSA-PSK ciphersuites. We already had all the base components and we have now added full support for the SSL key exchanges. These can be enabled with POLARSSL_KEY_EXCHANGE_ECDHE_PSK and POLARSSL_KEY_EXCHANGE_RSA_PSK.

Changes
RSA blinding has been changed to lock a smaller portion of code and the TLS compression code in the SSL layer now only allocates a single buffer per connection.

For better compatibility support forreaddir_r()on non-Windows systems can be indicated with POLARSSL_HAVE_READDIR_R and config.h has been adapted to allow better use in scripts to enable / disable options.

Bug fixes
A large number of fixes have been done to reduce warnings when using the MSVC compilers. Numerous fixes have been done to prevent errors and warnings and fix a possible naming collision in dhm_context.

Who should update
Our advice for all users of PolarSSL is to update to this branch!

下载:https://polarssl.org/download/polarssl-1.3.1-gpl.tgz

来自:开源中国社区
文章评论

共有 0 条评论