[openssl-users] Reg, TLS over SCTP (SOCK_SEQPACKET)

Michael Tuexen Michael.Tuexen at lurchi.franken.de
Wed Mar 1 13:29:41 UTC 2017


> On 1 Mar 2017, at 06:34, Sanjaya Joshi <joshi.sanjaya at gmail.com> wrote:
> 
> Hi,
> Thank you Salz Rich for the confirmation.
> So, whether application can perform manual TLS handshakes when SOCK_SEQPACKET is used ?
I this the SOCK_SEQPACKET model doesn't fit well to the way the openssl code is layed out.
They basically want a one-to-one relation between a bio (for example a socket bio) and
a TLS connection. So there is no muxing/demuxing ongoing.

I'm wondering why you are sticking to the 1-to-many style sockets and why you are not
considering DTLS over SCTP instead of TLS over SCTP. DTLS over SCTP using one-to-one
style sockets (SOCK_STREAM) is supported by OpenSSL on Linux and FreeBSD.

Best regards
Michael 
> 
> Regards,
> Sanjaya
> 
> On Tue, Feb 28, 2017 at 7:03 PM, Salz, Rich <rsalz at akamai.com> wrote:
> > But these calls don't work when SOCK_SEQPACKET (one-to-many connections) is used. Does openssl provide any alternatives for these calls ? Or an application need to perform the TLS handshakes manually ?
> 
> This is not supported, and there are no demo's available.
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
> 
> -- 
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users



More information about the openssl-users mailing list