wolfSSL / wolfMQTT

wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.
https://www.wolfssl.com
GNU General Public License v2.0
521 stars 155 forks source link

Support for DTLS? #275

Closed HendrikVE closed 11 months ago

HendrikVE commented 2 years ago

Since paho.mqtt-sn.embedded-c has support for DTLS it would be awesome if wolfMQTT had support for this as well. Are there any plans for this? As wolfMQTT uses wolfSSL, which supports DTLS, this looks like a perfect fit to me :P

embhorn commented 2 years ago

Hello @HendrikVE

Yes! This is something we are discussing. Do you have any specific requirements for the DTLS encryption? Would you be able to provide feedback / testing?

HendrikVE commented 2 years ago

Nothing special I guess. Personally I would like to use DTLS for the sn-client using PSK and maybe also RPK which are also the options supported by RIOT and CoAP right now, but the paho gateway seems to only support X.509 at the moment. I hope adding e.g. PSK to paho should not be too complicated and I might take a look at it myself. I would be happy to support you with some testing feedback :)

fj-blanco commented 11 months ago

Hello @HendrikVE

Yes! This is something we are discussing. Do you have any specific requirements for the DTLS encryption? Would you be able to provide feedback / testing?

I would like to try a DTLS connection between some MQTT-SN clients and a Gateway/RSBM. I'm currently working on an academic project where this feature would be extremely useful. Is there any update on the timeline for DTLS support? I'd be more than happy to provide feedback and participate in testing.

Best ,

embhorn commented 11 months ago

Hi @fj-blanco

The wolfMQTT client library for MQTT-SN added support for DTLS in the PR: https://github.com/wolfSSL/wolfMQTT/pull/348

We'd love to hear your feedback!

@HendrikVE - I'll go ahead and mark this issue as closed.

fj-blanco commented 11 months ago

Hi @fj-blanco

The wolfMQTT client library for MQTT-SN added support for DTLS in the PR: #348

We'd love to hear your feedback!

@HendrikVE - I'll go ahead and mark this issue as closed.

Thanks. The point was, right now wolfSSL seems like the only way to go for DTLS 1.3 (interesting for PQ for example). But wolfSSL's MQTT-SN is just the client, right? As far as I know, there's no Gateway/RSBM/broker that works with wolfSSL for DTLS, so setting up MQTT-SN communication over DTLS 1.3 doesn't seem straightforward. That's why I think DTLS support in wolfMQTT would be interesting.

embhorn commented 11 months ago

@fj-blanco

Right! We would need to write our own gateway, or modify the Paho MQTT-SN gateway to support wolfSSL.

I've created a new issue for this https://github.com/wolfSSL/wolfMQTT/issues/358