[openssl-users] Reg, TLS over SCTP (SOCK_SEQPACKET)

Sanjaya Joshi joshi.sanjaya at gmail.com
Mon Mar 27 12:07:46 UTC 2017


Hi,
Thanks for the pointers. We will consider that option.

Regards,
Sanjaya

On Wed, Mar 1, 2017 at 6:59 PM, Michael Tuexen <
Michael.Tuexen at lurchi.franken.de> wrote:

> > On 1 Mar 2017, at 06:34, Sanjaya Joshi <joshi.sanjaya at gmail.com> wrote:
> >
> > Hi,
> > Thank you Salz Rich for the confirmation.
> > So, whether application can perform manual TLS handshakes when
> SOCK_SEQPACKET is used ?
> I this the SOCK_SEQPACKET model doesn't fit well to the way the openssl
> code is layed out.
> They basically want a one-to-one relation between a bio (for example a
> socket bio) and
> a TLS connection. So there is no muxing/demuxing ongoing.
>
> I'm wondering why you are sticking to the 1-to-many style sockets and why
> you are not
> considering DTLS over SCTP instead of TLS over SCTP. DTLS over SCTP using
> one-to-one
> style sockets (SOCK_STREAM) is supported by OpenSSL on Linux and FreeBSD.
>
> Best regards
> Michael
> >
> > Regards,
> > Sanjaya
> >
> > On Tue, Feb 28, 2017 at 7:03 PM, Salz, Rich <rsalz at akamai.com> wrote:
> > > But these calls don't work when SOCK_SEQPACKET (one-to-many
> connections) is used. Does openssl provide any alternatives for these calls
> ? Or an application need to perform the TLS handshakes manually ?
> >
> > This is not supported, and there are no demo's available.
> > --
> > openssl-users mailing list
> > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
> >
> > --
> > openssl-users mailing list
> > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170327/7bbb6a95/attachment.html>


More information about the openssl-users mailing list