Resetting DTLS server

Michael Richardson mcr at sandelman.ca
Wed Nov 13 09:15:04 UTC 2019



On 2019-11-12 10:30 p.m., Patrick Herbst wrote:
>
> I'm not creating a new socket because it is UDP, and i'm assuming only
> one client.  If you use a BIO_new_dgram, then you dont need to

You assumed one client, and you got one client.  What's the problem :-)

> Even if i were the "connect" the socket to the clients addr, the
> client comes up with the same addr/port combination, so the server's
> "connected" UDP socket will continue reading mesgs from the client.

I think that it won't work with OpenSSL for more than one DTLS session
to occur on the same 5-tuple pair.
Whether or not that is correct behaviour according to a specification, I
suspect is open to debate.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: OpenPGP digital signature
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20191113/68210af5/attachment.sig>


More information about the openssl-users mailing list