Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

TLS networking APIs#252

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Draft
andreagilardoni wants to merge2 commits intoarduino:master
base:master
Choose a base branch
Loading
fromandreagilardoni:tls-net-api

Conversation

andreagilardoni
Copy link
Contributor

The objective of this pr is to generalize the usage of TLS features inside of networking communication across all different Arduino cores. Currently there is no proper definition and standardization of TLS communication in Arduino Clients.

The objective of this PR is to discuss and reach a common point on how we should design and integrate the TLS extension across all Arduino cores.

The following aspects are going to be addressed:

  1. Not every TCP derived protocol is going to be stream like. For example MQTT. proposed solution:
    • split the definition of Client into 2 classes
  2. TLS Connections require to a way to provide Certificates
    • If not using mTls communication a client may be required to generate a temporary self signed certificate
  3. TLS Connections have multiple kind of verification that can be put in place:
    • mTls: the identity od both client and server need to be verified
    • Tls: the identity of the server needs to be verified against the provided CA
    • insecure: The identity of both ends is not verified
  4. hostname verification using TLS SNI field

Open points:

  • Certificate Class abstraction
  • Certificate Formats

- ClientConnect provides the abstraction required to address connection  methods for TCP like sessions.- Client provides the same Features as before, but it is specialized to  handle connections that are then handled like a stream, like a  classical TCP connectionThis distinction will be used to differentiate stream like communicationprotocols, i.e. websocket, tcp, http streaming, from discrete sizedpackets communication, like MQTT.
Added Interfaces to handle Tls api standardization in arduino core api.
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

2 participants
@andreagilardoni@per1234

[8]ページ先頭

©2009-2025 Movatter.jp