gpt4 book ai didi

c++ - 定义密码顺序的 openssl 函数

转载 作者:搜寻专家 更新时间:2023-10-31 02:08:21 25 4
gpt4 key购买 nike

<分区>

我有一个轻型 http 服务器(嵌入式软件解决方案)。此 http 服务器正在调用 openssl 函数来处理 https 连接。

我想让 https 服务器优先处理一些密码。因为根据以下link ,当 DH 密码优先时,https 连接更安全:

Instead of using the RSA method for exchanging session keys, you should use the Elliptic Curve Diffie-Hellman (ECDHE) key exchange. Note that you can still use the RSA public-key cryptosystem as the encryption algorithm, just not as the key exchange algorithm. ECDHE is much faster than ordinary DH (Diffie-Hellman), but both create session keys that only the entities involved in the SSL connection can access. Because the session keys are not linked to the server’s key pair, the server’s private key alone cannot be used to decrypt any SSL session.

To enable Perfect Forward Secrecy, you must do the following:

1- Reorder your cipher suites to place the ECDHE (Elliptic Curve Diffie-Hellman) suites at the top of list, followed by the DHE (Diffie-Hellman) suites.

2- Configure servers to enable other non-DH-key-exchange cipher suites from the list of cipher suites offered by the SSL Client.

如何更改我的 openssl 服务器上的密码顺序以首先生成 DH 密码?

25 4 0
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com