5 ms·

"Figure out TLS." Is this sarcasm? A joke?

charcircuit 4y ago
OpenSSL or your TLS library of choice will likely have documentation and examples showing you how to use it. I'm not sure I understand your point.
- distcs 4y ago
  Have you looked at the documentation or are you just guessing? When you realize how impenetrable OpenSSL or any TLS lib documentation looks to people untrained in cryptography, you would gain a new appreciation for Git man pages!
  - dimman 4y ago
    Kind of makes you think that the subject at hand is quite complex in its nature, thus untrained people might do best to steer away until properly trained.
  - magicalhippo 4y ago
    I used mbedTLS a while ago when implementing my own HTTPS server from scratch. I had no particular crypto or TLS knowledge, though I did know about ciphers, hashes and certificates from a high level. Between the docs[1][2] and the examples[3] I was up and running using my own IO stack in a couple of evenings. If I had used the IO stack from the library it would have been very easy. Another couple of evenings and I had it integrated with Windows' certificate store. In the end it wasn't very difficult to implement, but it was a bit more of a challenge figuring out the documentation and how it related to mbedTLS. Definitely a rewarding experience, gave me some nice insights into the plumbing. edit: Note, not trying to argue replacing libcurl is a weekend project! [1]: https://mbed-tls.readthedocs.io/projects/api/en/latest/ https://mbed-tls.readthedocs.io/projects/api/en/latest/ [2]: https://mbed-tls.readthedocs.io/projects/api/en/latest/api/group/group__ssltls__communication__module/ https://mbed-tls.readthedocs.io/projects/api/en/latest/api/g... [3]: https://github.com/Mbed-TLS/mbedtls/blob/development/programs/ssl/ssl_server.c https://github.com/Mbed-TLS/mbedtls/blob/development/program...
- deleted 4y ago
  [deleted]
sschueller 4y ago
Try eTLS, the e stands for security /s

OpenSSL or your TLS library of choice will likely have documentation and examples showing you how to use it. I'm not sure I understand your point.

distcs 4y ago
Have you looked at the documentation or are you just guessing? When you realize how impenetrable OpenSSL or any TLS lib documentation looks to people untrained in cryptography, you would gain a new appreciation for Git man pages!
- dimman 4y ago
  Kind of makes you think that the subject at hand is quite complex in its nature, thus untrained people might do best to steer away until properly trained.
- magicalhippo 4y ago
  I used mbedTLS a while ago when implementing my own HTTPS server from scratch. I had no particular crypto or TLS knowledge, though I did know about ciphers, hashes and certificates from a high level. Between the docs[1][2] and the examples[3] I was up and running using my own IO stack in a couple of evenings. If I had used the IO stack from the library it would have been very easy. Another couple of evenings and I had it integrated with Windows' certificate store. In the end it wasn't very difficult to implement, but it was a bit more of a challenge figuring out the documentation and how it related to mbedTLS. Definitely a rewarding experience, gave me some nice insights into the plumbing. edit: Note, not trying to argue replacing libcurl is a weekend project! [1]: https://mbed-tls.readthedocs.io/projects/api/en/latest/ https://mbed-tls.readthedocs.io/projects/api/en/latest/ [2]: https://mbed-tls.readthedocs.io/projects/api/en/latest/api/group/group__ssltls__communication__module/ https://mbed-tls.readthedocs.io/projects/api/en/latest/api/g... [3]: https://github.com/Mbed-TLS/mbedtls/blob/development/programs/ssl/ssl_server.c https://github.com/Mbed-TLS/mbedtls/blob/development/program...
deleted 4y ago
[deleted]

sschueller 4y ago

Try eTLS, the e stands for security /s