OpenSSL

OpenSSL

SSL and TLS crypto toolkit

Description

Putting HTTPS on a site, signing a test certificate, generating an RSA key pair — nearly all of it runs on OpenSSL under the hood. It is both a cryptography library and a command-line tool implementing SSL and TLS, and it handles the whole lifecycle of certificates and keys from the terminal.

There is no official Windows installer; the usual route is a third-party prebuilt binary. Besides the new 4.1.0 you can pick the 3.6.5 LTS, in x86 or x64.

Features



Cryptographic algorithms: AES, RSA, SHA and more for encrypting data in transit.

Certificate management: create self-signed certificates, request them from a CA and verify chains, each with its own command.

Key pair generation: generate RSA pairs so data encrypted at one end can only be read at the other, even if intercepted.

Forward secrecy: Perfect Forward Secrecy means one leaked session key does not expose past traffic.

Long-term support: the 3.x series has LTS releases under the Apache License, free for commercial use.