[openssl-users] Query regarding the SCTP events for DTLS connections
Michael Tuexen
Michael.Tuexen at lurchi.franken.de
Fri Sep 29 20:25:13 UTC 2017
> On 28. Sep 2017, at 20:36, mahesh gs <mahesh116 at gmail.com> wrote:
>
> Hi,
>
> We have an application which has SCTP connections we have secured the SCTP connections using the openssl DTLS. DTLS is working as expected other than the SCTP events.
>
> We use the API "BIO_new_dgram_sctp" to create a BIO objects and we register a callback function to openssl using API "BIO_dgram_sctp_notification_cb" to populate the SCTP events. I observe that openssl enables only authentication related events, do not enable any other events like association, shutdown etc.
>
> Code snippet from the API "BIO_new_dgram_sctp":
>
> event.sctp_authentication_event = 1;
>
> ret =
> setsockopt(fd, IPPROTO_SCTP, SCTP_EVENTS, &event,
> sizeof(struct sctp_event_subscribe));
> if (ret < 0) {
> BIO_vfree(bio);
> return (NULL);
> }
>
> Is there any specific reason for just enabling the authentication events ?
The authentication events are needed by the DTLS implementation and are therefore
enabled by it. Other events have to be subscribed by the application. See
https://github.com/nplab/DTLS-Examples/blob/master/src/dtls_sctp_echo.c
for an example.
Best regards
Michael
>
> If yes, is there any way applications register for other events like shutdown, association etc. We have a requirement where based on the SCTP events application executes certain business logic.
>
> Thanks,
> Mahesh G S
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
More information about the openssl-users
mailing list