[openssl-users] Multi client DTLS server on OpenSSL 1.1.x broken?

[Philip Prindeville]

> On Aug 15, 2018, at 2:09 PM, Richard Weinberger <richard at nod.at> wrote:
> 
> Philip,
> 
> Am Mittwoch, 15. August 2018, 21:36:30 CEST schrieben Sie:
>> 
>>> [snip]
>> 
>> 
>> Have you tried using Libevent?  It supports SSL/TLS/DTLS connections.
> 
> Can you please explain? I fear I miss something.


Have a look at:

http://www.wangafu.net/~nickm/libevent-book/Ref6a_advanced_bufferevents.html

you don’t need a dedicated thread per connection.

See the section “Bufferevents and SSL”

You can create an SSL context and then bind a connection listener to it.

If the library doesn’t specifically handle the case of DTLS (I know it handles SSL and TLS), then it shouldn’t be too hard to cobble something together and even get it upstreamed.

-Philip


> 
> Libevent seems to be able to deal with OpenSSL BIO objects.
> But how is it supposed to help me with the DTLSv1_listen() issue?
> 
> A quick grep on the Libevent sources does not show calls to DTLSv1_listen()
> and I don't think that it is open coding it. At least I hope so.
> 
> The problem I see is not about event processing, it is about OpenSSL 1.1.x's
> re-write of DTLSv1_listen().
> 
> Thanks,
> //richard
> 
> 
> -- 
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users