Network Security with OpenSSL
Cryptography for Secure Communications
Publisher: O'Reilly Media
Released: June 2002
Pages: 386

Most applications these days are at least somewhat network aware, but how do you protect those applications against common network security threats? Many developers are turning to OpenSSL, an open source version of SSL/TLS, which is the most widely used protocol for secure network communications.

The OpenSSL library is seeing widespread adoption for web sites that require cryptographic functions to protect a broad range of sensitive information, such as credit card numbers and other financial transactions. The library is the only free, full-featured SSL implementation for C and C++, and it can be used programmatically or from the command line to secure most TCP-based network protocols.

Network Security with OpenSSL enables developers to use this protocol much more effectively. Traditionally, getting something simple done in OpenSSL could easily take weeks. This concise book gives you the guidance you need to avoid pitfalls, while allowing you to take advantage of the library?s advanced features. And, instead of bogging you down in the technical details of how SSL works under the hood, this book provides only the information that is necessary to use OpenSSL safely and effectively. In step-by-step fashion, the book details the challenges in securing network communications, and shows you how to use OpenSSL tools to best meet those challenges.

As a system or network administrator, you will benefit from the thorough treatment of the OpenSSL command-line interface, as well as from step-by-step directions for obtaining certificates and setting up your own certification authority. As a developer, you will further benefit from the in-depth discussions and examples of how to use OpenSSL in your own programs. Although OpenSSL is written in C, information on how to use OpenSSL with Perl, Python and PHP is also included.

OpenSSL may well answer your need to protect sensitive data. If that?s the case, Network Security with OpenSSL is the only guide available on the subject.

Table of Contents
Product Details
About the Author
Colophon
Recommended for You
Customer Reviews

REVIEW SNAPSHOT®

by PowerReviews
oreillyNetwork Security with OpenSSL
 
3.8

(based on 6 reviews)

Ratings Distribution

  • 5 Stars

     

    (3)

  • 4 Stars

     

    (1)

  • 3 Stars

     

    (1)

  • 2 Stars

     

    (0)

  • 1 Stars

     

    (1)

Reviewed by 6 customers

Sort by

Displaying reviews 1-6

Back to top

(2 of 2 customers found this review helpful)

 
4.0

Network Security with OpenSSL Review

By Terry Horsnell

from Undisclosed

Comments about oreilly Network Security with OpenSSL:

I couldnt cope with SSL without this book, but I am knee-deep in

acronyms. A glossary would be a great help (it would save me compiling my own).

(2 of 2 customers found this review helpful)

 
3.0

Network Security with OpenSSL Review

By Eric Kampman

from Undisclosed

Comments about oreilly Network Security with OpenSSL:

This book has been tremendously helpful in wading through the enormity of OpenSSL. However, it cannot be stressed enough that chapter 5 is useless without downloading the examples from the www.oreilly.com site. In particular, the commands in the sidebar on pages 124-125 contain references to a .cnf file that is not available (anywhere, as far as I can tell). I suspect this is why there is a dramatic difference in opinions as to the usability of the examples -- one reviewer was trying to do this by hand; the other simply downloaded, tweaked, built and ran. I personally like to type the code in by hand, so I found this problem, and the lack of helpful information in the errata pages, very annoying.

This serious flaw mars an otherwise great book.

(1 of 1 customers found this review helpful)

 
5.0

Network Security with OpenSSL Review

By Antonio Rodriguez of the Columbia Java Users Group

from Undisclosed

Comments about oreilly Network Security with OpenSSL:

OpenSSL is a terrific programming resource, but the online documentation on it

is hard to understand and index. This book brings most of it all together, and

provides enough examples to answer most of your questions.

One thing that it lacks is tie-ins with Java; most of its examples are in Perl

and Python. I'm currently trying to see if certain ideas can be implemented in Java.

A great book, and great read!

 
5.0

Network Security with OpenSSL Review

By Martin Cooper

from Undisclosed

Comments about oreilly Network Security with OpenSSL:

Overall an excellent book. Before reading this book, I had played a little with OpenSSL, but found it very difficult to piece together the information needed to make use of the library. This book covered all of my problems, and gave me a good basic foundation in using the library. The only comment I can make is that the README file with the enclosed examples is a little unclear about how to compile the code, so ignore the chapter named files, and look in the ssl directory.

(1 of 2 customers found this review helpful)

 
5.0

Network Security with OpenSSL Review

By Kevin J. Schmidt

from Undisclosed

Comments about oreilly Network Security with OpenSSL:

This book is for anyone who wants to do real OpenSSL development. The authors have taken all the pain and headache out of trying to learn OpenSSL. The examples in this book are clear and easy to follow. Topics like PKI, certificate generation and management, and certificate authorities (CAs) are covered with the right amount of theory and practice.

Unlike one reviewer who had problems compiling the source code examples, I had no problem building and running all the examples on Linux. The only complaint I have is that each example is broken out into a seperate file, which can make it a little tough to piece back together, but even a novice C developer should have no problems.

(5 of 7 customers found this review helpful)

 
1.0

Network Security with OpenSSL Review

By Peter Grossman

from Undisclosed

Comments about oreilly Network Security with OpenSSL:

Examples are virtually unrunnable.

Specifically, there are no compile, link or platform instructions.

In addition, the examples are broken up into modules (Some without required #include's) and the required combination of source code to create a buildable app is left to the reader as an exercise.

I cannot imagine a platform upon which these examples could run.

Displaying reviews 1-6

Back to top

 
Buy 2 Get 1 Free Free Shipping Guarantee
Buying Options
Immediate Access - Go Digital what's this?
Ebook: $31.99
Formats:  DAISY, ePub, Mobi, PDF
Print & Ebook: $43.95
Print: $39.95