Actually, OpenSSL does this for us.
实际上，OpenSSL为我们完成了这项任务。
The required software is OpenSSL and stunnel.
所需的软件是OpenSSL和stunnel。
OpenSSL comes with a set of trust certificates.
OpenSSL附带了一组可信任证书。
OpenSSL is a popular open-source library for TLS.
OpenSSL是TLS的一个非常流行的开源库。
Become a CA by using the openssl perl utility CA.pl.
通过使用opensslperl实用工具CA . pl成为CA。
Pkcs12 files can be in PEM (as created by openssl pkcs12).
pkcs12文件可以用PEM编码(由openssl pkcs12创建)。
First, you're going to need the latest version of OpenSSL.
首先需要的是最新版本的OpenSSL。
Download the latest OpenSSL library and related documentation.
下载最新的openssl库及相关文档。
The OpenSSL performance was identical between the two systems.
两个系统中的OpenSSL性能平分秋色。
So how can you implement a basic secure connection using OpenSSL?
那么怎样才能使用OpenSSL实现一个基本的安全连接呢？
Create the server key: openssl genrsa -des3 -out server.key 1024.
创建服务器密匙：opensslgenrsa -des3 - out server . key 1024。
OpenSSL is more than just the API, it is also a command-line tool.
OpenSSL不只是API，它还是一个命令行工具。
OpenSSL has an entire internal library devoted to digital certificates.
OpenSSL有一个专门用于数字证书的库。
A Google search for "SSL library" returns OpenSSL at the top of the list.
在google中搜索“SSLlibrary”得到的返回结果中，列表最上方就是OpenSSL。
Instead, OpenSSL provides a callback mechanism for obtaining the password.
相反，OpenSSL为获得密码提供了一种回调机制。
The OpenSSL website provides downloads and documentation on this software.
OpenSSL网站提供关于这个软件的下载和文档。
The tools used to configure encryption are provided by the OpenSSL package.
用来配置加密的工具都是由openssl包提供的。
After you've installed the OpenSSL and stunnel programs, complete these steps.
安装好openssl和stunnel程序后，请完成以下步骤。
This flag tells OpenSSL what kind of BIO object to create: 0 for server, 1 for client.
这个标记告诉OpenSSL要创建哪种BIO对象：0用于服务器，1用于客户机。
It should also be noted here that OpenSSL is not officially supported on all platforms.
还要注意的是，OpenSSL并没有在所有的平台上都获得官方支持。
There is quite a bit to the OpenSSL library, much more than can be put into one article.
关于openssl库的内容非常多，远不是一篇文章可以容纳的。
In particular, the impact of OpenSSL (and specific tools like OpenSSH) has been immense.
特别是，OpenSSL(及具体的工具，如openssh)的影响是巨大的。
A template file called openssl.cnf is available in the apps folder of the openssl package.
在openssl程序包的apps文件夹中，有一个名为openssl . cnf的可用模板文件。
Instead, OpenSSL creates another BIO that must be popped off of the accept BIO using BIO_pop.
相反，openssl会创建另外一个BIO，它必须使用BIO _ pop来弹出接收BIO。
Commons-ssl supports over 50 formats of PKCS8 and OpenSSL Encrypted Private Keys in PEM or der.
commons - ssl支持PKCS8的超过50种格式，以及PEM或DER编码的OpenSSL加密私钥。
Cygwin including openssl - Version 0.9.8i of openssl was used in the development of this tutorial.
Cygwin包括openssl—版本0.9.8 i openssl用于本教程开发。
If you still don't believe that finding randomness is hard, just ask the Debian OpenSSL maintainers.
如果你还不相信寻找随机数是件困难的事，只要问问DebianOpenSSL维护者就知道了。
You may want to consider upgrading other software such as openssl, openssh, lsof, etc at this stage.
您也许想在这个阶段考虑升级其他软件，比如openssl、openssh、lsof等。
Most of the X.509 structures used inside of OpenSSL you will most likely never use in an application.
在 OpenSSL中使用的大部分 X.509结构您自己在应用程序中几乎都不会用到。
With this option set, if the server suddenly wants a new handshake, OpenSSL handles it in the background.
使用这个选项进行设置，如果服务器突然希望进行一次新的握手，那么OpenSSL可以在后台处理它。
应用推荐