[erlang-questions] DTLS client/server

[pablo platt]

Hi Andreas,

It seems that DLTS won't be ready for R17.

Is your implementation stable to use in production?
Do I need to prefix your ssl app so it won't interfere with the otp ssl
app?

Can you explain how to use it?

> For udp, lib/ssl/src/ssl_udp.erl already exists and
> [{versions, ['dtlsv1.2', dtlsv1]}, {cb_info, ssl_udp}] in your ssl options
> should work
>
Do I use ssl_udp like a normal udp socket?

Do I need to extend it to support dtls-srtp?
http://tools.ietf.org/html/rfc5764

> DTLS-SRTP requires sending use_srtp in extended hello and exchanging SRTP
> keys.
> DTLS-SRTP also requires that RTP and STUN messages are forwarded to the
> app.
>

Thanks





On Mon, Feb 3, 2014 at 10:56 AM, Ingela Andin <ingela.andin@REDACTED>wrote:

> Hi Pablo!
>
> Progress of DTLS will be included in R17, I will however not have time
> enough to make it a fully supported feature.
> Other high priority things have competed with it for my time. I am working
> with it at the moment but time flies and
> the only thing I can promise is that there will be some more pieces in
> place.
>
> Regards Ingela  Erlang/OTP Team - Ericsson AB
>
>
> 2014-02-02 pablo platt <pablo.platt@REDACTED>:
>
> I didn't see anything about DTLS in the R17 RC1 release notes.
>> Will this be included in the final R17 release?
>>
>>
>> On Thu, Dec 12, 2013 at 3:17 PM, pablo platt <pablo.platt@REDACTED>wrote:
>>
>>> Thanks
>>>
>>>
>>> On Thu, Dec 12, 2013 at 2:55 PM, Ingela Andin <ingela.andin@REDACTED>wrote:
>>>
>>>>
>>>> Hi!
>>>>
>>>> 2013/12/12 pablo platt <pablo.platt@REDACTED>
>>>>
>>>>> Hi
>>>>>
>>>>>
>>>>> Will it be possible to use DTLS for DTLS-SRTP when it will be released?
>>>>> http://tools.ietf.org/html/rfc5764
>>>>>
>>>>>
>>>>> DTLS-SRTP requires sending use_srtp in extended hello and exchanging SRTP keys.
>>>>>
>>>>> DTLS-SRTP also requires that RTP and STUN messages are forwarded to the app.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Will there be support out of the box for such extension?
>>>>>
>>>>>
>>>> No this will not work out of the box. But once DTLS is in place it
>>>> could be a fairly easy user contribution ;)
>>>>
>>>>
>>>> Regards Ingela Erlang/OTP Team Ericssson AB
>>>>
>>>>
>>>>>
>>>>> On Fri, Oct 18, 2013 at 5:07 AM, pablo platt <pablo.platt@REDACTED>wrote:
>>>>>
>>>>>> A preview in a few weeks will be great.
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>>
>>>>>> On Fri, Oct 18, 2013 at 12:12 AM, Ingela Andin <
>>>>>> ingela.andin@REDACTED> wrote:
>>>>>>
>>>>>>> Hi!
>>>>>>>
>>>>>>>
>>>>>>> 2013/10/17 pablo platt <pablo.platt@REDACTED>
>>>>>>>
>>>>>>>> Is there a chance for release preview of DTLS before the R17
>>>>>>>> release on February?
>>>>>>>>
>>>>>>>>
>>>>>>> Alas, I still do not have anything releasable that is runnable. I
>>>>>>>  have had to work with some other stuff in between.
>>>>>>> But I think previews can be possible. I have a rather large step in
>>>>>>> the pipeline that I probably can release in a few weeks
>>>>>>> as it then can be merged to maint. This step will include some  code
>>>>>>> from Andreas that implements basic stuff. But
>>>>>>> the internal structure of the code is quite different and the API is
>>>>>>> not totally set yet.
>>>>>>>
>>>>>>> Regards Ingela Erlang/OTP team - Ericsson AB
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20140228/a73dbc97/attachment.htm>