dtls

https://github.com/qwerty-iot/dtls

Renamed from https://github.com/bocajim/dtls

This package implements a RFC-4347 compliant DTLS client and server.

Key Features

• Pure go, no CGo
• Supports both client and server via UDP
• Supports TLS_PSK_WITH_AES_128_CCM_8 cipher RFC-6655
• Supports TLS_PSK_WITH_AES_128_CBC_SHA256 cipher RFC-5487
• Supports TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 cipher RFC-7251
• Supports pre-shared key authentication
• Supports certificate based authentication
• Supports DTLS session resumption
• Supports persisting session data for resumption later
• Designed for OMA LWM2M comliance LWM2M
• Support for Connection ID RFC-9146 (Nov/19 draft)

TODO

• Implement session renegotiation
• Implement packet retransmission for handshake
• Implement out of order handshake processing
• Implement replay detection
• Implement client hello stateless cookie handling
• Improve parallel processing of incoming packets
• Implement Connection ID for latest RFC-9146 draft

Samples

Keystore

    mks := keystore.NewMemoryKeyStore()
keystore.SetKeyStores([]keystore.KeyStore{mks})
psk, _ := hex.DecodeString("00112233445566")
mks.AddKey("myIdentity", psk)

Sample Client

    listener, _ = NewUdpListener(":6000", time.Second*5)
peer, err := listener.AddPeer("127.0.0.1:5684", "myIdentity")

err = peer.Write("hello world")
data, rsp := listener.Read()

Generating Certificates

The following commands can be used to generate certificates for testing:

# generate private key
openssl ecparam -out key.pem -name prime256v1 -genkey

# generate certificate
openssl req -new -key key.pem -x509 -nodes -days 3650 -out cert.pem

Documentation

http://godoc.org/github.com/qwerty-iot/dtls

License

Mozilla Public License Version 2.0

NOTE: License was changed from MIT on 11/20/2020.