{"id":50,"date":"2010-04-17T21:28:26","date_gmt":"2010-04-18T06:28:26","guid":{"rendered":"\/blog\/?p=50"},"modified":"2023-09-21T09:41:22","modified_gmt":"2023-09-21T00:41:22","slug":"ssl","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=50","title":{"rendered":"SSL"},"content":{"rendered":"\n<P><STRONG>NAME<\/STRONG><br \/>SSL - OpenSSL SSL\/TLS library <\/P>\n<P>&nbsp;<\/P>\n<P><STRONG>DESCRIPTION<br \/><\/STRONG>OpenSSL ssl \ub77c\uc774\ube0c\ub7ec\ub9ac\ub294 Secure Sockets Layer (SSL v2\/v3)\uc640 Transport Layer Security (TLS v1) \ud504\ub85c\ud1a0\ucf5c\uc744 \uad6c\ud604\ud55c\ub2e4. \uc5ec\uae30 \ubb38\uc11c\ud654\ub418\uc5b4 \uc788\ub294 \ub9ce\uc740 API\ub97c \uc81c\uacf5\ud55c\ub2e4.<\/P>\n<P>\uba3c\uc800 \ub77c\uc774\ube0c\ub7ec\ub9ac\ub294 \ucd08\uae30\ud654\ub418\uc5b4\uc57c \ud55c\ub2e4; SSL_library_init(3)\uc744 \ubcf4\ub77c. <\/P>\n<P>\ub2e4\uc74c, SSL_CTX \uac1c\uccb4\uac00 \ud504\ub808\uc784\uc6e4\uc73c\ub85c \uc0dd\uc131\ub418\uc5b4 TLS\/SSL\uc774 \uac00\ub2a5\ud55c \uc5f0\uacb0\uc744 \ub9cc\ub4e0\ub2e4(SSL_CTX_new(3)\uc744 \ubcf4\ub77c). \uc778\uc99d\uc11c, \uc54c\uace0\ub9ac\uc998 \ub4f1\uacfc \uad00\ub828\ub41c \ub2e4\uc591\ud55c \uc635\uc158\ub4e4\uc774 \uc774 \uac1d\uccb4\uc5d0\uc11c \uc124\uc815\ub41c\ub2e4.<\/P>\n<P>\ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc774 \uc0dd\uc131\ub420\ub54c, \uadf8\uac83\uc740 SSL \uac1c\uccb4\ub85c \ud560\ub2f9\ub420 \uc218 \uc788\ub2e4. SSL-new(3)\uc744 \uc0ac\uc6a9\ud558\uc5ec SSL \uac1c\uccb4\uac00 \ub9cc\ub4e4\uc5b4\uc9c4 \ub2e4\uc74c, SSL_set_fd(3) \ub610\ub294 SSL_set_bio(3)\uc744 \uc0ac\uc6a9\ud558\uc5ec \ub124\ud06c\uc6cc\ud06c \uc5f0\uacb0\uacfc \uac1c\uccb4\ub97c \uc5f0\uad00\uc2dc\ud0ac \uc218 \uc788\ub2e4.<\/P>\n<P>\ub2e4\uc74c, TLS\/SSL \ud578\ub4dc\uc170\uc774\ud06c\uac00 SSL_accept(3) \ub610\ub294 SSL_connect(3) \uac00 \uac01\uac01 \uc0ac\uc6a9\ub418\uc5b4 \uc218\ud589\ub41c\ub2e4. SSL_read(3) \uc640 SSL_write(3) \ub294 TLS\/SSL \uc5f0\uacb0\uc0c1\uc5d0\uc11c \ub370\uc774\ud130\ub97c \uc77d\uace0 \uc4f0\ub294\ub370 \uc0ac\uc6a9\ub41c\ub2e4. SSL_shutdown(3)\uc740 TLS\/SSL \uc5f0\uacb0\uc744 \uc167\ub2e4\uc6b4\ud558\ub294\ub370 \uc0ac\uc6a9\ub41c\ub2e4.<\/P>\n<P>&nbsp;<\/P>\n<P><STRONG>DATA STRUCTURES<br \/><\/STRONG>\ud604\uc7ac OpenSSL ssl \ub77c\uc774\ube0c\ub7ec\ub9ac \ud568\uc218\ub294 \ub2e4\uc74c\uc758 \ub370\uc774\ud130 \uad6c\uc870\ub97c \ub2e4\ub8ec\ub2e4:<\/P>\n<P>SSL_METHOD (SSL Method)<br \/>&nbsp; &nbsp; \ub0b4\ubd80 ssl\ub77c\uc774\ube0c\ub7ec\ub9ac \uba54\uc11c\ub4dc\/\ud568\uc218\ub97c \uc124\uba85\ud558\ub294 \ubc30\ud3ec \uad6c\uc870\uccb4\uc774\ub2e4. \uc774 \uba54\uc11c\ub4dc\uc640 \ud568\uc218\ub4e4\uc740 \ub2e4\uc591\ud55c<br \/>&nbsp; &nbsp; \ud504\ub85c\ud1a0\ucf5c \ubc84\uc804(SSLv1, SSLv2, TLSv1)\uc744 \uad6c\ud604\ud55c\ub2e4. SSL_CTX\ub97c \uc0dd\uc131\ud560 \ud544\uc694\uac00 \uc788\ub2e4.<\/P>\n<P>SSL_CIPHER (SSL Cipher)<br \/>&nbsp; &nbsp; \ud2b9\uc815 \uc0ac\uc774\ud37c\uc5d0 \ub300\ud55c \uc54c\uace0\ub9ac\uc998\uc744 \uac00\uc9c4 \uad6c\uc870\uccb4. \uc774 \uc0ac\uc774\ud37c\ub4e4\uc740 TLS\/SSL \ud504\ub85c\ud1a0\ucf5c\uc758 \ud575\uc2ec\uc774\ub2e4.<br \/>&nbsp;&nbsp; &nbsp;\uac00\uc6a9\ud55c \uc0ac\uc774\ud37c\ub4e4\uc740 SSL_CTX \uae30\ubc18\uc704\uc5d0 \uad6c\uc131\ub418\uace0, \uc2e4\uc81c \uc0ac\uc6a9\ub418\ub294 \uac83\ub4e4\uc740 SSL_SESSION\uc758<br \/>&nbsp; &nbsp; \ubd80\ubd84\uc774\ub41c\ub2e4.<\/P>\n<P>SSL_CTX (SSL Context)<br \/>&nbsp; &nbsp; \ud504\ub85c\uadf8\ub7a8 \uc0dd\uc874\uc2dc \ud55c\ubc88 \uc11c\ubc84\ub098 \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0 \uc758\ud574\uc11c \ub9cc\ub4e4\uc5b4\uc9c0\ub294 \uae00\ub85c\ubc8c \ucee8\ud14d\uc2a4\ud2b8\uc774\ub2e4.<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uadf8\uac83\uc740 \uc8fc\ub85c \ub098\uc911\uc5d0 \uc5f0\uacb0\uc744 \uc704\ud574\uc11c \uc0dd\uc131\ub420 SSL\uad6c\uc870\uccb4\uc5d0 \ub300\ud55c \uae30\ubcf8\uac12\uc744 \uac00\uc9c4\ub2e4.<\/P>\n<P>SSL_SESSION (SSL Session)<br \/>&nbsp; &nbsp; \uc5f0\uacb0\uc5d0 \ub300\ud55c TLS\/SSL \uc138\uc158 \uc0c1\uc138\ub97c \ub2f4\uace0 \uc788\ub294 \uad6c\uc870\uccb4:<\/P>\n<P>&nbsp; &nbsp; SSL_CIPHERs, client and server certificates, keys, etc. <\/P>\n<P>SSL (SSL Connection)<br \/>&nbsp; &nbsp; \uba54\uc778 SSL\/TLS \uad6c\uc870\uccb4\ub85c\uc368 \ub9cc\ub4e4\uc5b4\uc9c4 \uc5f0\uacb0\ub9c8\ub2e4 \uc11c\ubc84\ub098 \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0 \uc758\ud574\uc11c \uc0dd\uc131\ub41c\ub2e4.<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uc774\uac83\uc740 \uc2e4\uc81c SSL API\uc5d0\uc11c \ud575\uc2ec \uad6c\uc870\uccb4\uc774\ub2e4. \ub7f0\ud0c0\uc784\ud558\uc5d0\uc11c \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uc740<\/P>\n<P>&nbsp;&nbsp; &nbsp;\ubcf4\ud1b5 \uac70\uc758 \ubaa8\ub4e0 \ub2e4\ub978 \uad6c\uc870\uccb4\uc640 \uc5f0\uacb0\uc744 \uac00\uc9c0\uace0 \uc788\ub294 \uc774 \uad6c\uc870\uccb4\ub97c \ub2e4\ub8e8\uac8c \ub41c\ub2e4.<\/P>\n<P>&nbsp;<\/P>\n<P><STRONG>HEADER FILES<br \/><\/STRONG>Currently the OpenSSL ssl library provides the following C header files containing the prototypes for the data structures and and functions: <\/P>\n<P>ssl.h<br \/>&nbsp; &nbsp; SSL\/TLS API\uc5d0 \ub300\ud55c \uacf5\ud1b5 \ud5e4\ub354\ud30c\uc77c\uc774\ub2e4. ssl \ub77c\uc774\ube0c\ub7ec\ub9ac\ub97c \uac00\uc6a9\ud558\ub3c4\ub85d \ud558\uae30 \uc704\ud574\uc11c<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uc774\uac83\uc744 \ud504\ub85c\uadf8\ub7a8\uc5d0 \ud3ec\ud568\uc2dc\ucf1c\uc57c \ud55c\ub2e4. \ub0b4\ubd80\uc801\uc73c\ub85c \ub354 \uc0ac\uc801\uc778 SSL \ud5e4\ub354\uc640<\/P>\n<P>&nbsp;&nbsp; &nbsp;crypto \ub77c\uc774\ube0c\ub7ec\ub9ac\ub85c\ubd80\ud130\uc758 \ud5e4\ub354\ub4e4\uc744 \ud3ec\ud568\ud558\uace0 \uc788\ub2e4. SSL API\uc758 \ub0b4\ubd80\uc5d0 \ub300\ud574\uc11c<\/P>\n<P>&nbsp;&nbsp; &nbsp;\ud575\uc2ec \uc0c1\uc138\ub0b4\uc5ed\uc774 \ud544\uc694\ud558\uba74, \uc774 \ud5e4\ub354\ud30c\uc77c\uc744 \ubcf4\uba74\ub41c\ub2e4.<\/P>\n<P>ssl2.h<br \/>&nbsp; &nbsp; SSLv2 \ud504\ub85c\ud1a0\ucf5c\ub9cc \ub2e4\ub8e8\ub294 \uc11c\ube0c \ud5e4\ub354 \ud30c\uc77c\uc774\ub2e4. \ubcf4\ud1b5 \uc774\uac83\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc778\ud074\ub8e8\ub4dc \ud560 \ud544\uc694\ub294<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uc5c6\ub2e4. \uc65c\ub0d0\ud558\uba74 \uc774\ubbf8 ssl.h\uc5d0 \uc778\ud074\ub8e8\ub4dc \ub418\uc5b4 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4. <\/P>\n<P>ssl3.h<br \/>&nbsp; &nbsp; SSLv3 \ud504\ub85c\ud1a0\ucf5c\ub9cc \ub2e4\ub8e8\ub294 \uc11c\ube0c \ud5e4\ub354 \ud30c\uc77c\uc774\ub2e4. \ubcf4\ud1b5 \uc774\uac83\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc778\ud074\ub8e8\ub4dc \ud560 \ud544\uc694\ub294<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uc5c6\ub2e4. \uc65c\ub0d0\ud558\uba74 \uc774\ubbf8 ssl.h\uc5d0 \uc778\ud074\ub8e8\ub4dc \ub418\uc5b4 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4. <\/P>\n<P>ssl23.h<br \/>&nbsp; &nbsp; SSLv2\uc640 SSLv3\uc758 \uacb0\ud569\ub41c \uc0ac\uc6a9\uc744 \ub2e4\ub8e8\ub294 \uc11c\ube0c \ud5e4\ub354 \ud30c\uc77c\uc774\ub2e4. \ubcf4\ud1b5 \uc774\uac83\uc744 \uba85\uc2dc\uc801\uc73c\ub85c<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uc778\ud074\ub8e8\ub4dc \ud560 \ud544\uc694\ub294 \uc5c6\ub2e4. \uc65c\ub0d0\ud558\uba74 \uc774\ubbf8 ssl.h\uc5d0 \uc778\ud074\ub8e8\ub4dc \ub418\uc5b4 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4. <\/P>\n<P>tls1.h<br \/>&nbsp; &nbsp; TLSv1 \ud504\ub85c\ud1a0\ucf5c\ub9cc \ub2e4\ub8e8\ub294 \uc11c\ube0c \ud5e4\ub354 \ud30c\uc77c\uc774\ub2e4. \ubcf4\ud1b5 \uc774\uac83\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc778\ud074\ub8e8\ub4dc \ud560 \ud544\uc694\ub294<\/P>\n<P>&nbsp;&nbsp; &nbsp;\uc5c6\ub2e4. \uc65c\ub0d0\ud558\uba74 \uc774\ubbf8 ssl.h\uc5d0 \uc778\ud074\ub8e8\ub4dc \ub418\uc5b4 \uc788\uae30 \ub54c\ubb38\uc774\ub2e4. <\/P>\n","protected":false},"excerpt":{"rendered":"<p>NAMESSL &#8211; OpenSSL SSL\/TLS library &nbsp; DESCRIPTIONOpenSSL ssl \ub77c\uc774\ube0c\ub7ec\ub9ac\ub294 Secure Sockets Layer (SSL v2\/v3)\uc640 Transport Layer Security (TLS v1) \ud504\ub85c\ud1a0\ucf5c\uc744 \uad6c\ud604\ud55c\ub2e4. \uc5ec\uae30 \ubb38\uc11c\ud654\ub418\uc5b4 \uc788\ub294 \ub9ce\uc740 API\ub97c \uc81c\uacf5\ud55c\ub2e4. \uba3c\uc800 \ub77c\uc774\ube0c\ub7ec\ub9ac\ub294 \ucd08\uae30\ud654\ub418\uc5b4\uc57c \ud55c\ub2e4; SSL_library_init(3)\uc744 \ubcf4\ub77c. \ub2e4\uc74c, SSL_CTX \uac1c\uccb4\uac00 \ud504\ub808\uc784\uc6e4\uc73c\ub85c \uc0dd\uc131\ub418\uc5b4 TLS\/SSL\uc774 \uac00\ub2a5\ud55c \uc5f0\uacb0\uc744 \ub9cc\ub4e0\ub2e4(SSL_CTX_new(3)\uc744 \ubcf4\ub77c). \uc778\uc99d\uc11c, \uc54c\uace0\ub9ac\uc998 \ub4f1\uacfc \uad00\ub828\ub41c \ub2e4\uc591\ud55c \uc635\uc158\ub4e4\uc774 \uc774 \uac1d\uccb4\uc5d0\uc11c \uc124\uc815\ub41c\ub2e4. \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0\uc774 \uc0dd\uc131\ub420\ub54c, [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[],"class_list":["post-50","post","type-post","status-publish","format-standard","hentry","category-development_lib"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/50","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=50"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/50\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=50"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=50"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=50"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}