Hello,
I'd like to discuss some new functionaity for Kamailio i intend to develop for a client.
My client need to integrate very specific transport security layer... The layer will function over tcp and udp and will be intgreated into the SSL framework
The client will provide a function returning SSL_METHOD * descritptor So what i need to do is 1) Add possibility to use SSL over udp socket 2) To use a new SSL method
So my first question is: Is there any chance that such functionality will be accepted into the main trunk of kamailio?
Thanks Vadim
El Viernes, 29 de Mayo de 2009, Vadim Lebedev escribió:
So what i need to do is
- Add possibility to use SSL over udp socket
SSL over UDP?? That's impossible! SSL/TLS requires a reliable transport protocol as TCP.
El Viernes, 29 de Mayo de 2009, Iñaki Baz Castillo escribió:
El Viernes, 29 de Mayo de 2009, Vadim Lebedev escribió:
So what i need to do is
- Add possibility to use SSL over udp socket
SSL over UDP?? That's impossible! SSL/TLS requires a reliable transport protocol as TCP.
Well.. wait...
There is DTLS (Datagram Transport Layer Security):
http://tools.ietf.org/html/rfc4347 http://en.wikipedia.org/wiki/Datagram_Transport_Layer_Security
Hello,
On 05/29/2009 09:32 PM, Vadim Lebedev wrote:
Hello,
I'd like to discuss some new functionaity for Kamailio i intend to develop for a client.
My client need to integrate very specific transport security layer... The layer will function over tcp and udp and will be intgreated into the SSL framework
The client will provide a function returning SSL_METHOD * descritptor So what i need to do is
- Add possibility to use SSL over udp socket
- To use a new SSL method
So my first question is: Is there any chance that such functionality will be accepted into the main trunk of kamailio?
any good contribution is welcome to the project. An important aspect is keep the sanity of core and not add companies' private stuff (i.e., something that can be used only by one company). I would like to see some lightweight secure communication channel supported by proxy, even if it is server-to-server.
Maybe in this case you can have (most of) the code as module -- see how tls hooks to core. You can ask here on mailing list any dev question you may have.
Cheers, Daniel