Subj : Re: documents for openssl
To   : comp.programming
From : David Tiktin
Date : Wed Oct 12 2005 12:28 pm

On 11 Oct 2005, mwojcik@newsguy.com (Michael Wojcik) wrote:

> For books, try Eric Rescorla's _SSL and TLS_: a bit dry, and not
> specific to OpenSSL, but it covers concepts you must understand to
> use OpenSSL correctly.  The O'Reilly OpenSSL book, by John Viega
> et al, is supposed to be good, though I haven't read it yet
> myself.  For that matter, some of the chapters in the
> Howard/LeBlanc/Viega _19 Deadly Sins of Software Security_ discuss
> SSL and related concepts, and since SSL has only two uses -
> security and the pretense of security -  it's another work that
> any developer using OpenSSL should have.

I've been reading Network Security with OpenSSL by Viega et al.  It's 
well written and doesn't assume prior knowledge of cryptography.  
It's the best thing I've found so far specifically on OpenSSL, and 
the source code is clear and explained in detail.

    	http://www.oreilly.com/catalog/openssl/

You can read it free online if you're an ACM memeber.  Safari is now 
part of the ACM's Professional Development Network.

Dave

-- 
D.a.v.i.d  T.i.k.t.i.n
t.i.k.t.i.n [at] a.d.v.a.n.c.e.d.r.e.l.a.y [dot] c.o.m

.