ГОСТ в OpenSSL: различия между версиями

Материал из ALT Linux Wiki
м (Правки 178.137.167.116 (обсуждение) откачены к версии АндрейЧерепанов)
Строка 1: Строка 1:
== Поддержка шифрования по ГОСТ в OpenSSL ==
https://bitly.com/bundles/kaylainude/1 tara reid family guy tara reid in american reunion https://openlibrary.org/works/OL16863107W/LEELEE_SOBIESKI_NUDE!_DESNUDA! leelee sobieski joy ride leelee sobieski peliculas que ha hecho https://openlibrary.org/works/OL17060608W/LEILA_LOPES_NUDE!_DESNUDA! leila lopes rumors leila lopes answer question https://openlibrary.org/works/OL17060609W/LEILANI_DOWDING_NUDE!_DESNUDA! leilani dowding style album leilani dowding necklace https://openlibrary.org/works/OL17060610W/LELA_LOREN_NUDE!_DESNUDA! lela loren sacramento lela loren 50 cent
 
1. Установите пакет {{pkg|openssl-engines}}:
 
apt-get install openssl-engines
 
2. Измените конфигурационный файл OpenSSL. Для этого создайте скрипт {{path|gost-for-openssl}} следующего содержания:
<source lang="Bash"># Adapt OpenSSL for GOST cryptography support
# See http://www.cryptocom.ru/products/openssl-1-config-en.html
 
. shell-version
. shell-ini-config
 
shell_ini_config_prefix=""
cfg="/etc/openssl/openssl.cnf"
 
grep -q '^openssl_conf' $cfg || sed -i '1iopenssl_conf = openssl_def' $cfg
 
if [ $libshell_version -ge 3 ] ; then
  ini_config_set $cfg openssl_def engines engine_section
  ini_config_set $cfg engine_section gost gost_section
  ini_config_set $cfg gost_section engine_id gost
  ini_config_set $cfg gost_section default_algorithms ALL
  ini_config_set $cfg gost_section CRYPT_PARAMS id-Gost28147-89-CryptoPro-A-ParamSet
else
  grep -q 'Gost' $cfg && exit
  cat >> $cfg << _EOF_
[openssl_def]
engines = engine_section
 
[engine_section]
gost = gost_section
 
[gost_section]
engine_id = gost
default_algorithms = ALL
CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet
_EOF_
fi</source>
 
Запустите скрипт ([[Su|под правами root]]):
 
sh gost-for-openssl
 
3. Проверьте, доступны ли шифры ГОСТ для OpenSSL:
<source lang="Bash">$ openssl ciphers|tr ':' '\n'|grep GOST
GOST2001-GOST89-GOST89
GOST94-GOST89-GOST89</source>


== Создание ключей ==
== Создание ключей ==

Версия от 16:45, 17 октября 2014

https://bitly.com/bundles/kaylainude/1 tara reid family guy tara reid in american reunion https://openlibrary.org/works/OL16863107W/LEELEE_SOBIESKI_NUDE!_DESNUDA! leelee sobieski joy ride leelee sobieski peliculas que ha hecho https://openlibrary.org/works/OL17060608W/LEILA_LOPES_NUDE!_DESNUDA! leila lopes rumors leila lopes answer question https://openlibrary.org/works/OL17060609W/LEILANI_DOWDING_NUDE!_DESNUDA! leilani dowding style album leilani dowding necklace https://openlibrary.org/works/OL17060610W/LELA_LOREN_NUDE!_DESNUDA! lela loren sacramento lela loren 50 cent

Создание ключей

openssl genpkey -algorithm gost2001 -pkeyopt paramset:A -out ca.key 1024

Используемая литература