OpenSSL and EC Libraries - Revision history

934: /* Fixes / Workarounds */ convenience link to stackoverflow.com for "how-to"

2015-08-01T15:34:24Z

Fixes / Workarounds: convenience link to stackoverflow.com for "how-to"

← Older revision		Revision as of 15:34, 1 August 2015
Line 6:		Line 6:


	One workaround is to compile your own OpenSSL and use this rather than the distribution package manager's library.		One workaround is to compile your own OpenSSL and use this rather than the distribution package manager's library. Some hints how to do this can be found in the answers of [https://stackoverflow.com/questions/22952287/how-to-upgrade-openssl-in-centos-6-5-linux-unix-from-source How to upgrade OpenSSL (stackoverflow.com)].

934: /* Fixes / Workarounds */ remove outdated "RPMs provided by gmaxwell". fedora up to version 21 does not even receive security updates, not to mention the bugs in openssl... Save not to link to those rpms imo

2015-08-01T15:28:48Z

Fixes / Workarounds: remove outdated "RPMs provided by gmaxwell". fedora up to version 21 does not even receive security updates, not to mention the bugs in openssl... Save not to link to those rpms imo

← Older revision		Revision as of 15:28, 1 August 2015
Line 5:		Line 5:
	== Fixes / Workarounds ==		== Fixes / Workarounds ==

	~~Some fixes are~~

	* Compile your own OpenSSL and use this rather than the distribution package manager's library.		One workaround is to compile your own OpenSSL and use this rather than the distribution package manager's library.
	* Use the RPMs provided by gmaxwell [https://people.xiph.org/~greg/openssl/] rather than the distribution package manager's library. (Warning: as of May 2014, these libraries are still vulnerable to the Heartbleed exploit, which affects Bitcoin through the RPC interface and payment protocol; it may also expose other applications on your system which use OpenSSL).

Andytoshi: Clarify bitcoin's non-use of restricted algos, don't be dismissive of heartbleed

2014-06-03T04:00:23Z

Clarify bitcoin's non-use of restricted algos, don't be dismissive of heartbleed

← Older revision		Revision as of 04:00, 3 June 2014
Line 1:		Line 1:
	== OpenSSL Without Elliptic Curve Support ==		== OpenSSL Without Elliptic Curve Support ==

	Some algorithms in OpenSSL library may be restricted by patent law. Due to strong coupling between the elliptic curve support Bitcoin requires and these nominally non-free algorithms, some Linux distributions (most notably Fedora) ship OpenSSL libraries with elliptic curve support disabled. Since Bitcoin depends on elliptic curve cryptography, it cannot be used with such libraries.		Some algorithms in OpenSSL library may be restricted by patent law. Due to strong coupling between the elliptic curve support Bitcoin requires and these nominally non-free algorithms, some Linux distributions (most notably Fedora) ship OpenSSL libraries with elliptic curve support disabled. Since Bitcoin depends on elliptic curve cryptography (although ''not'' on any restricted algorithms), it cannot be used with such libraries.

	== Fixes / Workarounds ==		== Fixes / Workarounds ==
Line 8:		Line 8:

	* Compile your own OpenSSL and use this rather than the distribution package manager's library.		* Compile your own OpenSSL and use this rather than the distribution package manager's library.
	* Use the RPMs provided by gmaxwell [https://people.xiph.org/~greg/openssl/] rather than the distribution package manager's library. (Warning: as of May 2014, these libraries are still vulnerable to the Heartbleed exploit, which ~~does not seriously affect~~ Bitcoin ~~but~~ may expose other ~~parts of~~ your system.)		* Use the RPMs provided by gmaxwell [https://people.xiph.org/~greg/openssl/] rather than the distribution package manager's library. (Warning: as of May 2014, these libraries are still vulnerable to the Heartbleed exploit, which affects Bitcoin through the RPC interface and payment protocol; it may also expose other applications on your system which use OpenSSL).

Andytoshi: Create page, ask for comments on IRC..

2014-06-03T03:54:02Z

Create page, ask for comments on IRC..

New page

== OpenSSL Without Elliptic Curve Support ==

Some algorithms in OpenSSL library may be restricted by patent law. Due to strong coupling between the elliptic curve support Bitcoin requires and these nominally non-free algorithms, some Linux distributions (most notably Fedora) ship OpenSSL libraries with elliptic curve support disabled. Since Bitcoin depends on elliptic curve cryptography, it cannot be used with such libraries.

== Fixes / Workarounds ==

Some fixes are

* Compile your own OpenSSL and use this rather than the distribution package manager's library.
* Use the RPMs provided by gmaxwell [https://people.xiph.org/~greg/openssl/] rather than the distribution package manager's library. (Warning: as of May 2014, these libraries are still vulnerable to the Heartbleed exploit, which does not seriously affect Bitcoin but may expose other parts of your system.)