dannagle / PacketSender

Network utility for sending / receiving TCP, UDP, SSL, HTTP
https://packetsender.com
GNU General Public License v2.0
2.36k stars 367 forks source link

Add DTLS (TLS over UDP) support #214

Open OrenShm opened 3 years ago

OrenShm commented 3 years ago

What OS?

Description of issue

Currently the packet sender supports udp \ tcp \ ssl (TLS). It would be great if it could also support DTLS (Datagram TLS == "TLS over UDP").

It could be checked again OpenSSL \ mbedTLS.

Opening DTLS server using mbedTLS: ./programs/ssl/ssl_server2 ca_file= crt_file= key_file= server_addr= server_port= auth_mode=required dtls=1

Opening DTLS server using OpenSSL: openssl s_server -accept -auth -cert -key -cert2 -key2 -CAfile -servername -Verify required -dtls1_2

An echo server of DTLS could be found here (It also requires openssl)- https://github.com/nplab/DTLS-Examples

dannagle commented 3 years ago

Very interesting idea. A few years back when I looked at this, I determined DTLS was not that stable with hard-to-find examples. It seems worth another look now.

OrenShm commented 3 years ago

Sounds great, thanks 👍

danfoxley commented 1 year ago

For a WebRTC application, the large DTLS (larger than MTU size) packet gets fragmented and reassembled. We've run into scenarios where firewalls are blocking large UPD.