license. It claims to be the leader of embedded web server in the future.The latter is the first product of mbedthis company created by Michael o'brien, GPL Commercial License. mob described it as mini-Apache. in the process of use, we can also feel this: Through appweb. the conf configuration file supports dynamic loading of modules. the above two Web servers are the first choice for most routers and other devices. The following describes the main features of these two Web servers:Appweb feat
MatrixSSL ECC key verification Denial of Service Vulnerability
Release date:Updated on: 2014-09-09
Affected Systems:MatrixSSLDescription:MatrixSSL is an embedded SSL and TLS implementation designed for applications and devices that consume less resources.
An error occurred when processing the ECDHE key in versions earlier than MatrixSSL 3.6.2. By sending the constructed ECC key, attackers can exploit thi
CommercialLicense is the leader of Embedded Web servers in the future.
The latter is Michael.The first product of the company mbedthis created by O 'Brien, GPL CommercialLicense. Mob describes it as mini-Apache. during use, mob also feels this: Through appweb. confThis configuration file supports dynamic loading of modules. The above two configuration files are the first choice for most routers and other devices.Server features:
AppwebFeatures ):
Appweb is a standards-based embedded HTTP serv
in the memory;
Fast response. More than 65 requests can be processed per second;
Complies with http1.0/http1.1 standards;
It has a large number of extended APIs for user development;
SSL3.0 (Secure Sockets Layer) is supported, such as matrixssl (the latest version is matrixssl 3-2 );
Supports user group management;
Supports DAA access authentication;
Small memory usage. If SSL is not included, only
Related support library migration
It mainly includes libiconv, zlib, and matrixssll.
Download the third-party Toolkit provided by Embedthis and use git to obtain the packages Package from GitHub. The command is as follows.
Gitclone http://github.com/embedthis/packages
If the download fails, you can download the zip package directly at https://github.com/embedthis/packagesand choose the volume package:
Among them, libiconv-1.11, zlib and matrixssl in
software, for example, Firefox uses the NSS library and Chrome uses the modified version of the NSS library.
The following table shows some common software and the SSL/TLS implementation libraries they use:
There are also some common SSL implementation libraries, such as cryptlib, CyaSSL, MatrixSSL, and PolarSSL. Due to the low market share, we will not discuss them here.5.2 popular SSL/TLS library security research
The high-risk SSL Security Vulne
Today, I tried to compile goahead. We can see that the goahead document contains information about how to use matrix to support SSL. The required matrix version in this document is 3.1.2, but the official website did not find this version to download.
So I downloaded the latest 3.4.2 and modified the makefile. the following error occurs when the compilation result is used!
Root @ jack-desktop :~ /Software/webs-2-5/Linux # makecc-c-o .. /matrixsslsocket. o-OS-dwebs-dos = "Linux"-dlinux-dus
Contact Us
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.