openssl-tls-knowledge-patch
Installation
SKILL.md
OpenSSL and TLS Knowledge Patch
Use this skill to design, migrate, debug, build, or secure software that depends on OpenSSL, libssl, libcrypto, the OpenSSL CLI, native QUIC, or Linux kernel TLS.
Reference index
| Reference | Topics |
|---|---|
| CLI, configuration, and PKI | Configuration loading and diagnostics, command behavior, certificate and request workflows, CMP |
| Migration and compatibility | Removed and deprecated APIs, opaque types, build/platform changes, API policy, TLS-library integration tradeoffs |
| Providers, cryptography, and FIPS | Provider configuration, EVP and digest changes, PQC, opaque symmetric keys, random generation, FIPS behavior and installation |
| TLS and QUIC | TLS behavior, groups and key shares, ECH, native and external-stack QUIC, stream and BIO contracts |
| Linux kernel TLS | Record boundaries, ancillary data, key updates, zero-copy, record-size limits, observability |
| Security advisories and patch floors | CVEs, affected configurations, branch-specific minimum fixes, operational mitigations |