New module: add wolfSSL as alternate TLS stack.

Pre-Submission Checklist

Commit message has the format required by CONTRIBUTING guide
Commits are split per component (core, individual modules, libs, utils, ...)
Each component has a single commit (if not, squash them into one commit)
No commits to README files for modules (changes must be done to docbook files
in doc/ subfolder, the README file is autogenerated)

Type Of Change

Small bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds new functionality)
Breaking change (fix or feature that would change existing functionality)

Checklist:

PR should be backported to stable branches
Tested changes locally
Related to issue #XXXX (replace XXXX with an open issue number)

Description

This a new module: an alternate TLS implementation based on wolfSSL. The current tls module based on OpenSSL has many multi-process workarounds and can be quite fragile.

This is the initial code dump which is a copy of tls/ and edited to compile with wolfSSL by using the OpenSSL compatibility layer. The doc/ directory has not been changed.

The proposal is to get it into the code base as soon as possible so as to sync up with any ongoing changes in the tls/ module. Any shared features can be extracted out into a common module: like certificate and configuration.

In the short-term the steps are:

testing
use native wolfSSL APIs (remove OpenSSL compatibility layer)
remove OpenSSL multi-process hacks in this module

This module is inspired by the tls_wolfssl module in the sister SIP project.

You can view, comment on, or merge this pull request online at:

https://github.com/kamailio/kamailio/pull/3144

Commit Summary

f3565fb tls_wolfssl: new module TLS stack based on wolfSSL

File Changes

(49 files)

A src/modules/tls_wolfssl/Makefile (81)
A src/modules/tls_wolfssl/README (1713)
A src/modules/tls_wolfssl/TODO.md (7)
A src/modules/tls_wolfssl/doc/Makefile (4)
A src/modules/tls_wolfssl/doc/certs_howto.xml (154)
A src/modules/tls_wolfssl/doc/functions.xml (63)
A src/modules/tls_wolfssl/doc/history.xml (38)
A src/modules/tls_wolfssl/doc/hsm_howto.xml (64)
A src/modules/tls_wolfssl/doc/params.xml (1410)
A src/modules/tls_wolfssl/doc/rpc.xml (69)
A src/modules/tls_wolfssl/doc/tls.xml (367)
A src/modules/tls_wolfssl/fixed_c_zlib.h (258)
A src/modules/tls_wolfssl/sbufq.h (283)
A src/modules/tls_wolfssl/tls.cfg (106)
A src/modules/tls_wolfssl/tls_bio.c (314)
A src/modules/tls_wolfssl/tls_bio.h (69)
A src/modules/tls_wolfssl/tls_cert.sh (201)
A src/modules/tls_wolfssl/tls_cfg.c (289)
A src/modules/tls_wolfssl/tls_cfg.h (111)
A src/modules/tls_wolfssl/tls_config.c (536)
A src/modules/tls_wolfssl/tls_config.h (53)
A src/modules/tls_wolfssl/tls_ct_q.h (133)
A src/modules/tls_wolfssl/tls_ct_wrq.c (205)
A src/modules/tls_wolfssl/tls_ct_wrq.h (98)
A src/modules/tls_wolfssl/tls_domain.c (1585)
A src/modules/tls_wolfssl/tls_domain.h (238)
A src/modules/tls_wolfssl/tls_dump_vf.c (150)
A src/modules/tls_wolfssl/tls_dump_vf.h (41)
A src/modules/tls_wolfssl/tls_init.c (589)
A src/modules/tls_wolfssl/tls_init.h (85)
A src/modules/tls_wolfssl/tls_locking.c (59)
A src/modules/tls_wolfssl/tls_locking.h (34)
A src/modules/tls_wolfssl/tls_map.c (195)
A src/modules/tls_wolfssl/tls_map.h (77)
A src/modules/tls_wolfssl/tls_mod.c (733)
A src/modules/tls_wolfssl/tls_mod.h (45)
A src/modules/tls_wolfssl/tls_rand.c (375)
A src/modules/tls_wolfssl/tls_rand.h (32)
A src/modules/tls_wolfssl/tls_rpc.c (263)
A src/modules/tls_wolfssl/tls_rpc.h (33)
A src/modules/tls_wolfssl/tls_select.c (1707)
A src/modules/tls_wolfssl/tls_select.h (52)
A src/modules/tls_wolfssl/tls_server.c (1557)
A src/modules/tls_wolfssl/tls_server.h (101)
A src/modules/tls_wolfssl/tls_util.c (99)
A src/modules/tls_wolfssl/tls_util.h (87)
A src/modules/tls_wolfssl/tls_verify.c (135)
A src/modules/tls_wolfssl/tls_verify.h (42)
A src/modules/tls_wolfssl/todo.txt (4)

Patch Links:

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.