Tag Archives: Programming

How to Build Your Own OpenSSL

4 Replies

So you have been reading all the press on forward secrecy and want to deploy it? But does your OpenSSL support it? Thankfully it is easy to tell, just run this command:

> openssl ciphers

If you see ciphers like “ECDHE-RSA-AES256-GCM-SHA384” then you have a version of OpenSSL that was built with ECC and ECDHE support enabled which is required if you want forward secrecy today.

So how do you go about doing this? Thankfully you don’t need to be a developer of cryptographer, with the following commands you should be able to get the latest (as of the time of this post) OpenSSL with ECC and ECDH enabled.

root> cp /usr/bin/openssl /usr/bin/openssl.orig
root> cd /tmp
root> wget http://www.openssl.org/source/openssl-1.0.1e.tar.gz
root> tar -xvzf openssl-1.0.1e.tar.gz
root> cd openssl-1.0.1e
root> ./config no-shared no-threads 
root> make depend
root> make
root> make install

You may also need to re-build your web server,you see even though the latest versions of Nginx and Apache include the necessary changes to enable ECDH if the version you are running was built against a version of OpenSSL that did not include support your going to have to rebuild it also. Here is a quick post on how to do that for Nginx.

Good luck!

Ryan

Wanted: Software Engineer [Seattle/Manila]

Title: Software Engineer

Location: Greater Seattle Area and Manila

Languages: English

Who we are

GlobalSign was formed in 1996 as one of the Internet’s original trust service providers (you probably know us as a Certificate Authority). Over the years we have issued millions of digital certificates that have been used to secure commerce and communication on the Internet. Our solutions take the pain out of using cryptography and help organizations solve complex problems with increased productivity and peace of mind.

What we’re going to do

The web has changed a lot since 1996 but how we bootstrap trust on it has not changed much – we are going to fix that.

Who we’re looking for

We are building a small engineering team here in the Seattle area and another in Manila and need developers who feel comfortable on both the front- and back-end. People who love learning new stuff, self-starters — true creative problem solvers.

We want someone who feels knows behavior between and across browsers, best practices, and when and it and is not okay to use an OnClick event.

Someone who believes tested code is happy code, that when done right security can enable new scenarios, that APIs should be easy to consume and that a well thought out platform is significant part of a projects success.

Skills & Experience

HTML/CSS/Javascript (jQuery, AJAX, etc.) with a healthy interest in HTML5, REST and JSON.
Experience with one or more server-side languages and frameworks especially Java, Node.js and PHP.
Interest in developing highly interactive web applications with performance, scalability, and usability in mind.
Experience working with Linux, Apache, and relational databases. Bonus points for having written your own stored procedure before.
Experience developing software in a professional environment, including source control, bug tracking, unit testing
Understanding of security risks and secure software development.
Understanding of the similarities and differences across browsers (both young and old).
Love your version control (Git preferably).
Enjoys prototyping and iterating stuff.
Bonus points for speaking Japanese.

Required Qualifications

2 years dynamic / scripting language programming, with background in Java and C++ programming preferred.
1+ years experience in Systems Engineering / Administration with firm understanding of *nix architecture.
Bachelor’s degree in Computer Science, or equivalent experience. Engineering or related discipline highly recommended.
Awesomeness trumps all other requirements.

If this sounds like it could be you, send us a CV and some examples of the work that you’re most proud of.

GlobalSign is an equal opportunity employer with locations all over the world. Aside from being a great place to work we offer an excellent benefit package that includes Health, Dental, 401k, Life Insurance, and a generous time off and holiday schedule.

All applicants will be considered without regard to race, color, religion, sex, national origin, age, marital or veteran status; medical condition, disability; or any other legally protected status.

Wanted: Senior Software Engineer (Front-End) [Seattle]

Title: Senior Software Engineer (Front-End)

Location: Greater Seattle Area

Languages: English

Who we are

GlobalSign was formed in 1996 as one of the Internet’s original trust service providers (you probably know us as a Certificate Authority). Over the years we have issued millions of digital certificates that have been used to secure commerce and communication on the Internet. Our solutions take the pain out of using cryptography and help organizations solve complex problems with increased productivity and peace of mind.

What we’re going to do

The web has changed a lot since 1996 but how we bootstrap trust on it has not changed much – we are going to fix that.

Who we’re looking for

We are building a small engineering team here in the Seattle area and need a senior developer who is passionate about security and creating beautiful user experiences. In this role you’ll be able to use your experience to help us recruit new team members and build our engineering team to into a powerhouse.

We want someone who feels someone who feels comfortable on both the front- and back-end, who loves learning new stuff, who’s entrepreneurial, a technical leader, a true creative problem solver.

You’ll have experience with security technologies but your background will be focused on building experiences that bridge the gap between user needs and technology requirements. You’ll also have experience building fault-tolerant, high performance, and highly scalable systems.

Skills & Experience

HTML/CSS/Javascript (jQuery, AJAX, etc.) master with a healthy interest in HTML5, REST and JSON.
Experience with one or more server-side languages and frameworks especially Java, Node.js and PHP.
Experience designing highly interactive web applications with performance, scalability, usability, and security in mind.
Experience with relational database schema design and queries.
Experience developing software on Unix/Linux.
Love your version control (Git preferably).
Understanding of applied cryptographic concepts such as certificates, certificate chains, key management.
Understanding of security risks and secure software development.
Enjoys prototyping and iterating stuff.Bonus points for speaking Japanese.

Required Qualifications

5 years dynamic / scripting language programming, with background in C/C++ systems programming preferred.
2+ years experience in Systems Engineering / Administration with firm understanding of *nix architecture.
Strong Computer Science fundamentals (data structures and algorithms).
Bachelor’s degree in Computer Science, or equivalent experience. Engineering or related discipline highly recommended.
Awesomeness trumps all other requirements.

If this sounds like it could be you, send us a CV and some examples of the work that you’re most proud of.

GlobalSign is an equal opportunity employer with locations all over the world. Aside from being a great place to work we offer an excellent benefit package that includes Health, Dental, 401k, Life Insurance, and a generous time off and holiday schedule.

All applicants will be considered without regard to race, color, religion, sex, national origin, age, marital or veteran status; medical condition, disability; or any other legally protected status.