OpenSSL repairing method and device and electronic equipment

Abstract

The invention provides an OpenSSL repairing method and device and electronic equipment. The method comprises the steps that a problem module in a current OpenSSL library is determined; obtaining a repaired module of the problem module; the repaired module is a module obtained after the problem module is repaired; and writing the repaired module into the source code of the project, and replacing the calling interface of the problem module in the project with the calling interface of the repaired module. In this way, during subsequent work, calling of a problem module in a project can be transferred to a newly-added repaired module, so that repair of the OpenSSL is achieved, and the whole OpenSSL library does not need to be upgraded. Therefore, the OpenSSL library is not upgraded, and external related dependence does not need to be changed, so that the repair difficulty of the OpenSSL in the project is reduced, the repair time is shortened, and meanwhile, the problem that OpenSSL repair cannot be performed due to the fact that some parts of the tool chain cannot be upgraded is also avoided.

Description

technical field [0001] The present application relates to the technical field of network security, in particular, to an OpenSSL repair method, device and electronic equipment. Background technique [0002] In programs dealing with SSL (Secure Sockets Layer, Secure Sockets Layer) business and encrypted data, OpenSSL (a Secure Sockets Layer cryptographic library, including main cryptographic algorithms, commonly used key and certificate encapsulation management functions and SSL protocol, and provides rich applications for testing or other purposes). Since the implementation of encryption and decryption is difficult and requires relatively high security, when the product encounters a security problem or a BUG (defect) in the encryption module of the OpenSSL library, it needs to be repaired in time. [0003] At present, the purpose of repairing the encryption module with bugs is usually achieved by upgrading the OpenSSL library. However, in a software development project, eac...

AI Technical Summary

Problems solved by technology

However, in a software development project, each part of the development environment or tool chain is interdependent. After the OpenSSL library is upgraded, the upgraded OpenSSL library is often different from the original version in terms of programs and interfaces. Sexuality issues lead to the failure of dependencies related to the OpenSSL library in the project, resulting in the need to upgrade the entire tool chain, making the repair work difficult, time-consuming, and sometimes impossible

Images