Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add DTLS (TLS over UDP) support #214

Open
1 of 3 tasks
OrenShm opened this issue Dec 16, 2020 · 3 comments
Open
1 of 3 tasks

Add DTLS (TLS over UDP) support #214

OrenShm opened this issue Dec 16, 2020 · 3 comments
Assignees

Comments

@OrenShm
Copy link

OrenShm commented Dec 16, 2020

What OS?

  • Windows
  • Mac
  • Linux (Which distro?)

Description of issue

Currently the packet sender supports udp \ tcp \ ssl (TLS).
It would be great if it could also support DTLS (Datagram TLS == "TLS over UDP").

It could be checked again OpenSSL \ mbedTLS.

Opening DTLS server using mbedTLS:
./programs/ssl/ssl_server2 ca_file=<ca_cert> crt_file=<server_cert> key_file=<key_file> server_addr=<hostname_ip> server_port=<server_port> auth_mode=required dtls=1

Opening DTLS server using OpenSSL:
openssl s_server -accept <server_port> -auth -cert <server_cert> -key <server_key> -cert2 <server_cert> -key2 <server_key> -CAfile <ca_cert> -servername -Verify required -dtls1_2

An echo server of DTLS could be found here (It also requires openssl)-
https://github.com/nplab/DTLS-Examples

@dannagle dannagle self-assigned this Dec 16, 2020
@dannagle
Copy link
Owner

Very interesting idea. A few years back when I looked at this, I determined DTLS was not that stable with hard-to-find examples. It seems worth another look now.

@OrenShm
Copy link
Author

OrenShm commented Dec 17, 2020

Sounds great, thanks 👍

@danfoxley
Copy link

For a WebRTC application, the large DTLS (larger than MTU size) packet gets fragmented and reassembled. We've run into scenarios where firewalls are blocking large UPD.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants