-2

Is there a dtls library that you recommended?

vbence
  • 20,084
  • 9
  • 69
  • 118
deddihp
  • 653
  • 1
  • 6
  • 17

5 Answers5

2

You might take a look at OpenSSL. It handles both TLS and DTLS protocols.

To get an example, you might also want to look at the source code of OpenVPN.

I implemented a C++ abstraction layer for both TLS/DTLS using these sources.

Anyway, you'll have to be very patient since OpenSSL API is spread across multiple sources and doesn't provide an effecient way to "search" for a particular function or structure.

ereOn
  • 53,676
  • 39
  • 161
  • 238
  • is there any manual for DTLS implementation ?. – deddihp Mar 27 '10 at 12:53
  • You might take a look at the RFC: http://www.rfc-editor.org/rfc/rfc4347.txt Also, i'm afraid DTLS is not much used. You'll probably have to dig into other people's code to get information. – ereOn Mar 27 '10 at 13:39
1

The open source CyaSSL library supports both DTLS 1.0 and DTLS 1.2 as well, in addition to standard SSL/TLS protocols up to TLS 1.2. Written in C, there is also a Java wrapper available.

The CyaSSL Manual is a good reference regarding usage and guidance, and the download package contains both client and server examples to help users get up and running more quickly (found under the ./examples directory).

The following Wikipedia article can be a good reference point when comparing SSL/TLS libraries: http://en.wikipedia.org/wiki/Comparison_of_TLS_implementations.

Chrisc
  • 1,498
  • 4
  • 17
  • 30
1

I wrote a commentary/guide on how Net-SNMP used OpenSSL to implement DTLS:

http://www.net-snmp.org/wiki/index.php/DTLS_Implementation_Notes

Unfortunately, there are probably a few things incorrect and out of date with it. But it's still a better starting place because there is very little usable documentation out there at all.

Wes Hardaker
  • 21,735
  • 2
  • 38
  • 69
0

Openssl starts to support DTLS 1.0 since version 0.9.8, and version 1.0.1c or above is recommended due to some DTLS-related fixes(support for DTLS-SRTP, avoiding DTLS DoS attack, etc.)

If DTLS 1.2 is needed, openssl version 1.1.0 is necessary.

Yu Hao
  • 119,891
  • 44
  • 235
  • 294
0

DTLS is supported in the GnuTLS library as well. Information on the API and examples are provided in the GnuTLS Manual.

Nikos
  • 549
  • 2
  • 5