How can I use a modified openssl library (written in C) in my python code?

Question

I am writing a python script that imports ssl library. I need to create ssl socket. However, I find that I will need to use a modified version of openssl library. The author of the modified version told me that the underlying implementation of ssl module is using the openssl library. The author provided me with a file named ssllib.c. I searched the folder of the openssl library that I installed: openssl-0.9.8k_X64 but I could not find any ssl_lib.c file. Also, the author referring to openssl by openssl-1.0.1e which is another version than mine.

My question: How can I compile my python script with a modified version of openssl? Please, consider that I am using Windows x64 system and Python 2.7.

0x90 · Accepted Answer · 2015-07-21 05:23:08Z

1

You'll need to install the modified OpenSSL. Python merely has bindings, which will then call the functions in the compiled OpenSSL libraries. If the modified OpenSSL library is installed and in your path completely replacing the original OpenSSL library, then Python will "use" it.

This assumes that the modified library is in fact compatible with the original OpenSSL.

On a side-note, using modified cryptographic libraries is a terrible idea from a security perspective.

answered Jul 21, 2015 at 5:23

0x90

6,3292 gold badges38 silver badges56 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

user2192774 Over a year ago

How to install the modified Openssl while all what I have is ssl_lib.c file? Where shall I place this? under C:/ or inside Python2.7 folders?

0x90 Over a year ago

Unless the entire library is contained in this one file, you'll need the rest of the source to compile it. If the entire library is contained, you will need to compile it and place it into your PATH. That said, this story screams "scam". The likelihood of someone making a genuine implementation of SSL in a single file is close to zero. Either the source of the library is genuinely clueless, or he/she is trying to trick you into installing malware. I can't imagine a single scenario requiring a custom version of OpenSSL.

user2192774 Over a year ago

The author just added 2 functions to the openssl implementation. It is a research-related work so I exclude the idea of malware. I want to use his modified code because I need these 2 function also. The authors of the modified code did not publish it but send it to me when I requested. However, may be the change is done only in that file. But I do not know how to compile the library.

0x90 Over a year ago

In that case, you need to get the source code of the exact version of OpenSSL that file is from, replace the file and then build the library (configure, make, make install). Unfortunately, this will be quite tricky on Windows and most likely require Cygwin.

Collectives™ on Stack Overflow

How can I use a modified openssl library (written in C) in my python code?

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related