search

zubairhamed / canopus

CoAP Client/Server implementing RFC 7252 for the Go Language
Apache License 2.0
154 stars 41 forks source link

dTLS Support with PSK #7

Closed zubairhamed closed 7 years ago

louisZL commented 8 years ago

Has canopus provided dTLS security?

zubairhamed commented 8 years ago

Not yet. Not wanting to reinvent the wheel, i was waiting out if Golang would provide it. Using CGo with OpenSSL etc might be an option too. Interestingly enough there's some discussions on this couple of weeks back.

https://github.com/golang/go/issues/13525

I'll probably wait out a bit more on how this develops before deciding..

Z

louisZL commented 8 years ago

How long would they will implement the DTLS on Golang?

jvermillard commented 8 years ago

The last OpenSSL pre2 version support the AES-CCM8 PSK ciphersuite so a binding on OpenSSL using memory based BIO would be a trick

zubairhamed commented 8 years ago

Thanks for the hint. I was monkeying around with the last version of OpenSSL and CGO but it got overwhelming for me a bit there. I think i'll take another crack at this.

andreyevsyukov commented 8 years ago

Really curious about DTLS support in canopus too! Can we expect it the nearest future? Thanks.

jvermillard commented 8 years ago

I started a binding to openssl 1.1 (which support CCM8)

https://github.com/jvermillard/nativedtls

You can use it for DTLS client using PSK only for now, I need more time to do the server code.

Should be enough to connect a canopus based client to californium or leshan. Also I tested vs tinydtls server, it's working.

zubairhamed commented 8 years ago

Thanks Julian, that looks great. I'll give it a go. I'm a bit over my head with crypto.

Z

zubairhamed commented 7 years ago

dTLS added in ad1de684b531cf11adf7df7bd4b9b4a6cfe409d0

jvermillard commented 7 years ago