View source for SSLeay

{{Short description|Open-source implementation of SSL}}
{{Infobox software
| title = SSLeay
| author = Eric Andrew Young, Tim J. Hudson
| released = 1995?
| discontinued = yes
| latest release date = 1998?
| genre = [[Secure Sockets Layer]] 3.0 implementation
| license = SSLeay License
}}

'''SSLeay''' is an open-source [[Secure Sockets Layer|SSL]] implementation. It was developed by Eric Andrew Young<ref name=AUUG99-Ross-96> {{cite magazine |title= An Implementation of Secure FTP |author= David Ross |magazine= Proceedings of Open Source AUUG '99 |date= 1999 |page= 96 }}</ref> and Tim J. Hudson as an SSL 3.0 implementation using [[RC2]] and [[RC4]] encryption.<ref name=0596000456-114> {{cite book |title= Web Security, Privacy & Commerce |author= Simson Garfinkel, Gene Spafford |publisher= O'Reilly |date= 2002 |page= [https://archive.org/details/websecuritypriva0000garf/page/114 114] |isbn= 0596000456 |url= https://archive.org/details/websecuritypriva0000garf/page/114 }} </ref> The recommended pronunciation is to say each letter s-s-l-e-a-y and was first developed by Eric A. Young ("eay").<ref name=1565925092-329> {{cite book |title= HTTP: The Definitive Guide |author= David Gourley, Brian Totty |publisher= O'Reilly |date= 2002 |page= [https://archive.org/details/httpdefinitivegu00gour/page/329 329] |isbn= 1565925092 |url-access= registration |url= https://archive.org/details/httpdefinitivegu00gour/page/329 }} </ref> SSLeay also included an implementation of the [[Data_Encryption_Standard|DES]] from earlier work by Eric Young which was believed to be the first open-source implementation of DES. Development of SSLeay unofficially mostly ended, and volunteers forked the project under the [[OpenSSL]] banner around December 1998, when Hudson and Young both commenced working for [[RSA Security]] in Australia.

==SSLeay==
SSLeay was developed by Eric A. Young, starting in 1995. Windows support was added by Tim J. Hudson. Patches to open source applications to support SSL using SSLeay were produced by Tim Hudson. Development by Young and Hudson ceased in 1998. The SSLeay library and codebase is licensed under its own SSLeay License, a form of [[free software license]].<ref name=0596000456-114/><ref name=1565925092-329/><ref name=SSLeayLicense> {{cite work |title= SSLeay License |date= 1998 |author= Eric A. Young }} </ref> The SSLeay License is a BSD-style [[open-source license]], almost identical to a four-clause [[BSD license]].<ref> {{cite work |title= LICENSE |url=https://www.openssl.org/source/license-openssl-ssleay.txt |work= OpenSSL |author= OpenSSL Project |date= 1999 }} </ref>

SSLeay supports [[X.509]]v3 certificates and [[PKCS]]#10 certificate requests.<ref name=0412817705-54> {{cite book |title= Communications and Multimedia Security |author= Sokratis Katsikas |date= 1997 |publisher= Springer |page= 54 |isbn= 0412817705 }} </ref> It supports SSL2 and SSL3.<ref name=0764533061-402> {{cite book |title= Apache Server: Administrator's Handbook |author= Mohammed J. Kabir |date= 1999 |publisher= IDG |isbn= 0764533061 |page= 402 }} </ref> Also supported is [[Transport Layer Security|TLS]]v1.<ref name=0470852852-277> {{cite book |title= Internet Security: Cryptographic Principles, Algorithms and Protocols |author= Man Young Rhee |publisher= Wiley |date= 2003 |isbn= 0470852852 |page= 277 }} </ref>

The first secure FTP implementation was created under BSD using SSLeay by Tim Hudson.<ref name=AUUG99-Ross-96/>

The first open source Certifying Authority implementation was created with CGI scripts using SSLeay by Clifford Heath.

==Forks==
[[OpenSSL]] is a fork and successor project to SSLeay and has a similar interface to it.<ref name=1565925092-329/><ref name=9781411695740-105> {{cite book |title= Building an Internet Server With Freebsd 6 |author= Bryan Hong |date= 2006 |isbn= 9781411695740 |page= 105 |publisher= Unorthodocs }} </ref> After Young and Hudson joined RSA Corporation, volunteers forked SSLeay and continued development as OpenSSL.<ref name=0596000456-114/>

[[BSAFE SSL-C]] is a fork of SSLeay developed by Eric A. Young and Tim J. Hudson for RSA Corporation. It was released as part of [[BSAFE SSL-C]].<ref name=0596000456-114/><ref name=PRnews> {{cite news |url= http://www.prnewswire.co.uk/news-releases/rsa-introduces-bsafe-ssl-c-for-worldwide-markets-156031405.html |title= RSA Introduces BSAFE SSL-C for Worldwide Markets |author= RSA Data Security |date= 1999 |publisher= PR Newswire }} </ref>

==References==
{{reflist}}

==External links==
* [https://web.archive.org/web/20060115145739/http://www.columbia.edu/~ariel/ssleay/ SSLeay Documentation Archive] 
* [https://www.infoscience.co.jp/technical/crypto/ssleay_1998_9_24.html SSLapps Notes]

==See also==
* [[GnuTLS]]
* [[OpenSSL]], a major fork of SSLeay
* [[LibreSSL]], a major fork of OpenSSL
* [[wolfSSL]]

{{Cryptographic software}}
{{SSL/TLS}}

[[Category:Cryptographic software]]
[[Category:Transport Layer Security implementation]]


{{Security-software-stub}}