Free ssl software for linux

yaSSL is an SSL Library for programmers building security functionality into their applications and devices.
yaSSL has a dual licensing model, like MySQL, so it is available under GPL and commercial licenses. Support and consulting are also available for yaSSL.
Main features:
- SSL version 3 and TLS version 1 (client and server)
- OpenSSL compatibility layer
- MySQL integration
- Initial stunnel integration
- MD2, MD5, SHA-1, RIPEMD, HMAC, DES, 3DES, AES, ARC4, TWOFISH, BLOWFISH, RSA, DSS, DH, and PKCS#5 PBKDF2
- Simple API
- Interchangeable crypto and certificate libraries
- PEM and DER certificate support
- Very fast
- Multiple OS support: Win32, Linux, Solaris, FreeBSD, NetBSD, OpenBSD, and Mac OS X
Enhancements:
- This release of contains bugfixes and adds SHA-256, SHA-512, SHA-224, and SHA-384.

sslredir is a simple utility used for redirecting incoming non-SSL connections to outgoing SSL connections.

sslredir project is useful for enabling applications such as mail, news, or IRC clients, which do not support SSL, to connect to SSL servers. It also supports connecting to the remote host through a SOCKS4A proxy, so sslredir is ideal for use with Tor.

sslredir is similar to stunnel or socat, except that it is not as general-purpose as socat. It uses less than 450 lines of Python, so it is simple to audit (although it does rely on M2Crypto which relies on OpenSSL, both of which are rather more difficult to audit). sslredir is also designed to work nicely with Tor, whereas I had run into bugs with both socat and stunnel.

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library.
OpenSSL project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL toolkit and its related documentation.
OpenSSL is based on the excellent SSLeay library developed by Eric A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an Apache-style licence, which basically means that you are free to get and use it for commercial and non-commercial purposes subject to some simple license conditions.
Main features:
- Creation of RSA, DH and DSA key parameters
- Creation of X.509 certificates, CSRs and CRLs
- Calculation of Message Digests
- Encryption and Decryption with Ciphers
- SSL/TLS Client and Server Tests
- Handling of S/MIME signed or encrypted mail

ssl-cert-check is a Bourne shell script that checks the expiration status of digital certificates on SSL servers.
It supports both interactive and batch modes and easily integrates with cron. It provides custom expiration thresholds and can be configured to send email if a certificate is close to expiring.
Enhancements:
- This release contains a new "-i" option to print the certificate issuer.
- The requirement to use GNU date has been removed (the program now uses a built-in Julian date routine).
- The documentation has also been significantly updated to include numerous useful examples.

SSL-Explorer project is the worlds first open-source SSL VPN solution of its kind. This unique remote access solution provides users and businesses alike with a means of securely accessing network resources from outside the network perimeter using only a standard web browser.
SSL-based VPNs have become a hot topic in recent years. The benefits to productivity and the low maintenance overhead that comes with browser-based VPN solutions are something that cannot be overlooked by most businesses, though implementation costs can often be prohibitive.
In contrast to a conventional IPsec-based solution, no client side code needs to be installed on your end users systems. SSL VPNs rely on Javatm based technology and hence require only a standard web browser to operate.
Standard network protocols can be tunnelled through the SSL connection, meaning that email and intranet web/file resources are easily and securely accessible from outside the corporate network.
The use of SSL is highly beneficial in these circumstances since most firewall policies grant access to SSL traffic by default, meaning that no additional configuration is required. Our solution is not a firewall, but it effectively allows you to lock-down your network, leaving just a single port open on your firewall.
Enhancements:
Core
- Restart message is not prominent when a parameter is changed which requires a restart.
- A newly created resource should be seen instantly to logged in users without users having to log out and back in again.
- Name search does not escape invalid XML characters from the username.
- Name search is unable to find users with a space in the name.
- HTTP header injection exploit.
- Policies not listed in resource info tooltip.
- No Restart notification displayed when a valid license is installed after an invalid license upload fails.
- The SingleConnection tunnel command when creating extensions does not work with the false flag.
- Page table should provide each page in blocks of 10 items.
- Some system properties dissapear if an extension fails to upload.
- Sessions are not cleaned up after user disconnects.
- Group page GUI refactored.
- Status page GUI refactored.
- License manager page GUI refactored.
- Replacements option moved under web forwards.
- Replacement variables do not contain session:username and password in agent server proxy tab.
- Weak ciphers have been disabled for default configurations.
- Extension store fails to download plug-in dependencies.
- Access right page has strange 5000 resource type exists.
- Policy selection page contains redundant up and down button functionality.
- Creating a user then cancelling during password assignment.
- Creating applications with integer parameters are unable to use user attributes.
- Remote tunnels do not show in tunnel monitor.
- SSL-Tunnel source interface has no validation.
- Pressing cancel in profiles page when the session has timed out causes an exception if you try to press cancel again.
- Profiles page refactored.
- Checking a checkox in global profiles is unchecked after you change tabs.
- If you have a User and a Group with the same name, these cant both be assigned to a policy.
- Assigning a user which doesnt exist to a policy throws an exception.
- User cannot create an attribute even though they have been given the access rights to do so.
- Description is not a required field when creating an attribute.
- Filter does not work in attributes.
- Attributes page GUI refactored.
- Extension page GUI refactored.
- If a disabled extension has an update available the info page shows an exception.
- Password authentication scheme should be the only authentication scheme whenever prompted for re-authentication.
- Authentication scheme page GUI refactored.
- An authentication scheme should be allowed to be primary if a secondary scheme also exists.
- Redirection when canceling out of selecting an authentication scheme at logon is incorrect.
Installer
- Stepping back through the installer and changing the certificate type causes unusual behaviour during installation.
- Installation of extensions step in installer is irrelevant.
- Insallation progress bar added.
- Selecting All interfaces in the web server configuration step causes the service to fail.
Internationalization
- Selecting default language or disabling user selecting language do not work.

linux-ftpd-ssl project consists of a FTP server with SSL encryption support.

linux-ftdp-ssl is the netkit ftp server with encryption support.

ftpd-ssl replaces normal ftpd using SSL authentication and encryption.

It operates together with normal ftp. It checks if the other side is also talking SSL, if not it falls back to normal ftp protocol.

Advantages over normal ftp(d) are that your passwords and the data you send will not go in cleartext over the line, and nobody can get it with tcpdump or similar tools.

SSL Proxy server listens on a TCP port, accepts SSL connections, and forwards them to another local or remote TCP port.
For example, it is possible to create an HTTPS server if you have an HTTP server and you run an SSL Proxy server on port 443 which forwards the connections to port 80.
SSL Proxys design makes it as secure as possible and still perform well.
Enhancements:
- Improved certificate handling (chained certificates are now supported), more error information on SSL protocol errors during SSL_accept(), -U and -D options (buffer size), and a "powered by" logo.