Network Security with OpenSSL

  Author:    John Viega, Matt Messier, Pravir Chandra
  ISBN:    059600270X
  Sales Rank:    173809
  Published:    2002-06-15
  Publisher:    O'Reilly
  # Pages:    384
  Binding:    Paperback
  Avg. Rating:    5.0 based on 9 reviews
  Used Offers:    16 from $22.36
  Amazon Price:    $26.37
  (Data above last updated:  2008-08-15 00:40:28 EST)
  
  
Sort customer reviews by:
  
Show All Reviews on Page      Hide All Reviews on Page
   
  
Network Security with OpenSSL
  
Most applications these days are at least somewhat network aware, but how do you protect those applications against common network security threats? Many developers are turning to OpenSSL, an open source version of SSL/TLS, which is the most widely used protocol for secure network communications. The OpenSSL library is seeing widespread adoption for web sites that require cryptographic functions to protect a broad range of sensitive information, such as credit card numbers and other financial transactions. The library is the only free, full-featured SSL implementation for C and C++, and it can be used programmatically or from the command line to secure most TCP-based network protocols. Network Security with OpenSSL enables developers to use this protocol much more effectively. Traditionally, getting something simple done in OpenSSL could easily take weeks. This concise book gives you the guidance you need to avoid pitfalls, while allowing you to take advantage of the library?s advanced features. And, instead of bogging you down in the technical details of how SSL works under the hood, this book provides only the information that is necessary to use OpenSSL safely and effectively. In step-by-step fashion, the book details the challenges in securing network communications, and shows you how to use OpenSSL tools to best meet those challenges. As a system or network administrator, you will benefit from the thorough treatment of the OpenSSL command-line interface, as well as from step-by-step directions for obtaining certificates and setting up your own certification authority. As a developer, you will further benefit from the in-depth discussions and examples of how to use OpenSSL in your own programs. Although OpenSSL is written in C, information on how to use OpenSSL with Perl, Python and PHP is also included. OpenSSL may well answer your need to protect sensitive data. If that?s the case, Network Security with OpenSSL is the only guide available on the subject.
                  Reader Reviews 1 - 8 of 8                 
  
  
Review
Date
Review
Rating(5 High)
Review
Helpful
to:
Customer Review Reviewer
Info
Permanent
Link
Reader Reviews Below Sorted by Newest First
07-29-08 4 (NA)
(Hide Review...)  If it weren't for this book, I don't know where I would be...
Reviewer Permalink
Everything I needed to know to write code supporting certificates, multi-threading and error reporting was explained in the first five chapters. Without this book to tie together disparate facts, I probably would still be scrounging through Google hits, forums and the OpenSSL source code. At least a week of research and experimentation (non-billable hours) were saved. Highly recommended.
(Review Data Last Updated: 2008-08-15 00:42:44 EST)
02-27-08 4 2\2
(Hide Review...)  good for programmers
Reviewer Permalink
Contents: intro, openssl command line, PKI, then programming: support infrastructure, ssl, symmetric keys, hashes, public keys, and openSSL for Perl, Python, and PHP.

As others have noted, this is a great book for programming. It's not as detailed if you are looking to set up your own PKI. Basically it is about 30 pages of the openssl command (using symmetric keys, generating private keys, making certificates, signing them) and ~270 pages or so of programming.
(Review Data Last Updated: 2008-08-05 02:12:26 EST)
01-09-07 5 0\1
(Hide Review...)  SSL made Clear
Reviewer Permalink
I worked on a LAMP project with 'C' switching application behind it. This book clearly described what I needed and how to do it. Very good resource.
(Review Data Last Updated: 2008-02-28 12:22:22 EST)
01-09-07 4 2\3
(Hide Review...)  SSL programming
Reviewer Permalink
This book was a valuable resource in implementing Secure Sockets, it would have been difficult to finish my product without it.
(Review Data Last Updated: 2008-02-28 12:22:22 EST)
05-28-05 4 2\2
(Hide Review...)  Great Book to Use When Writing an SSL app.
Reviewer Permalink
If you have little or no experience with SSL, or OpenSSL, get this book. It explains the principles behind SSL, and then goes on to cover OpenSSL. The companion website opensslbook.com contains the latest examples.

The only drawbacks to the book are the way that the authors cover random number generators for windows, (totally excludes the MS crypto function cryptgenrand(), in favor of the Author's own entropy collection system), and the creation of certificates could have been covered a little better. I also kept having to consult the Openssl API documentation for clarification on certain things, but overall this is a great book.
(Review Data Last Updated: 2006-01-17 14:07:41 EST)
10-12-04 5 4\4
(Hide Review...)  openssl programming cleanly explained
Reviewer Permalink
The book starts with a general introduction of encryption in general, then SSL protocol in general. Then openssl command line interface is introduced with some easy to follow examples. Later openssl programming is explained in detail.

As the only free SSL programming library with source code available, openssl is notorious for its undocumented/underdocumented/misdocumented manuals. Starting a software project using openssl without prior experience is often a painful experience if you simply rely on the manuals coming with the source code. Given thousands of interfaces/data structures, it is an overwhelming job to understand openssl in depth. Your best bet is usually reading the sample source code that comes with package, but often it leaves lots of questions - what does this api do? Why use this one? Under what circumstances should I use this one? You may rely on openssl mailing list, but answer is not guaranteed and you have to do your own home work first.

So come this book finally. It explains (using many examples) most interfaces a typical openssl programmer would use in reality. It is a really easy to read from chapter to chapter since the authors apparently try to explain most api using a short and clear example.

I wish when the next version comes out, it can do:

1. fix typos. Yeah, it does contain some typos. Good proofreading is needed.

2. Include topics in openssl 0.9.7. Like CRL.

3. What's going on under hood. How openssl code is organized, how interface control of flow goes. This helps understand the openssl library and debugging as well.
(Review Data Last Updated: 2006-01-17 14:07:41 EST)
11-22-02 5 6\6
(Hide Review...)  Excellent!
Reviewer Permalink
OpenSSL is a terrific programming resource, but the online documentation on it
is hard to understand and index. This book brings most of it all together, and
provides enough examples to answer most of your questions.

One thing that it lacks is tie-ins with Java; most of its examples are in Perl
and Python. I'm currently trying to see if certain ideas can be implemented in Java.

A great book, and great read!

(Review Data Last Updated: 2006-01-17 14:07:41 EST)
07-08-02 5 8\9
(Hide Review...)  The only SSL book you'll need..
Reviewer Permalink
My title says it all. If you are a programmer who needs to use OpenSSL in a custom client/server application, then get this book. The code examples and corresponding text make perfect sense. The authors also go to great trouble to make sure you know the correct way in which to use the OpenSSL package. The book also covers using the openssl command-line utility. If you've ever pulled your hair out trying to understand how to use OpenSSL or have read the VERY incomplete documentation, then buy this book and have all your questions answered.
(Review Data Last Updated: 2006-01-17 14:07:41 EST)
  
                  Reader Reviews 1 - 8 of 8                 
  
  
  
  
  
  

Because the data used to generate this site come from outside sources, VeryWellSaid.com cannot guarantee the completeness or accuracy of the data.
Search VeryWellSaid™
Google
Web VeryWellSaid™
New subjects are added every week.
View Subjects Below by:
* Top Selling
 (click category name, left)
* Top-Rated Top Sellers
 (click 'Top Rated', right)
In the news...  
Dubai\UAE Top Rated
Influenza\Bird Flu Top Rated
Iraq Top Rated
Supreme Court Top Rated
All Books Top Rated
Arts Top Rated
Photography Top Rated
Digital Photography Top Rated
Digital Cameras Top Rated
Biography Top Rated
Business Top Rated
Management Top Rated
Marketing Top Rated
Sales Top Rated
Stocks Top Rated
Bonds Top Rated
Real Estate Top Rated
Trading Top Rated
Commodities Trading Top Rated
Time Management Top Rated
Starting A Business Top Rated
Children's Top Rated
Comics Top Rated
Computers Top Rated
PC Top Rated
Mac Top Rated
Programming Top Rated
Design Patterns Top Rated
.Net Top Rated
C# Top Rated
Vb.Net Top Rated
Asp.Net Top Rated
Java Top Rated
Python Top Rated
PHP Top Rated
Perl Top Rated
Javascript Top Rated
Ajax Top Rated
CSS Top Rated
Open Source Top Rated
SQL Top Rated
Databases Top Rated
Oracle Top Rated
MySql Top Rated
Sql Server Top Rated
IIS Top Rated
Apache Top Rated
Linux Top Rated
Windows Server Top Rated
Project Management Top Rated
HTML Top Rated
UML Top Rated
IT Certifications Top Rated
Cisco Certifications Top Rated
MCSE Top Rated
MCSD Top Rated
Cooking Top Rated
Italian Cooking Top Rated
Vegetarian Cooking Top Rated
Wine Top Rated
Engineering Top Rated
Entertainment Top Rated
Health Top Rated
Nutrition Top Rated
Dieting Top Rated
Sex Top Rated
History Top Rated
Military History Top Rated
British History Top Rated
Middle East History Top Rated
Land Battles Top Rated
Naval Warfare Top Rated
Air Warfare Top Rated
9/11 Top Rated
Terrorism Top Rated
Home Top Rated
Mortgage\Home Equity Loan Top Rated
Cars Top Rated
Car Buying Top Rated
Sports Cars Top Rated
Cat Top Rated
Humor Top Rated
Horror Top Rated
Law Top Rated
IP Law Top Rated
Legal History Top Rated
Fiction Top Rated
Oprah's Book Club Top Rated
Medicine Top Rated
Cancer Top Rated
Stroke Top Rated
Heart Disease Top Rated
Fertility Top Rated
Diabetes Top Rated
Pharmacology Top Rated
Back Problems Top Rated
Menopause Top Rated
Thyroid Top Rated
Pain Top Rated
Organic Chemistry Top Rated
Immune System Top Rated
Mystery Top Rated
Nonfiction Top Rated
Outdoors Top Rated
Running Top Rated
Radio Control Models Top Rated
Guns Top Rated
Parenting Top Rated
Divorce Top Rated
Professional Top Rated
Reference Top Rated
Religion Top Rated
Romance Top Rated
Science Top Rated
Physics Top Rated
Chemistry Top Rated
Astronomy Top Rated
Psychology Top Rated
Science Fiction Top Rated
Sports Top Rated
Teens Top Rated
Travel Top Rated
USA Top Rated
Europe Top Rated
France Top Rated
Italy Top Rated
England Top Rated
China Top Rated
All Books Arts Biography Click Here For An A-Z Index Of All 213 Best-Seller Subjects Business Children's Comics
Computers Cooking Engineering Entertainment Health History Home Horror Humor Law Fiction Medicine Mystery
Nonfiction Outdoors Parenting Professional Reference Religion Romance Science Sci-Fi Sports Teens Travel
In Association with Amazon.com

Cache miss
(not cached)