DTLS
Jump to navigation
Jump to search
Datagram Transport Layer Security https://en.wikipedia.org/wiki/Datagram_Transport_Layer_Security
provides communications security for datagram protocols to prevent eavesdropping, tampering, or message forgery.
IETF Datagram Transport Layer Security Version 1.2, RFC 6347
API
Java
http://git.bouncycastle.org/repositories/bc-java
Node.js
Installer
git clone https://github.com/Rantanen/node-dtls.git cd node-dtls/ npm install cd example/
Modifier client.js
"use strict";
var dtls = require( '../' );
var fs = require( 'fs' );
var cpt=0;
dtls.setLogLevel( dtls.logLevel.FINE );
var client = dtls.connect( 4433, 'localhost', 'udp4', function() {
console.log( 'Sending application data' );
client.send( new Buffer( process.argv[2] +': cpt=' + (cpt++) +'\n' ) );
});
client.on( 'message', function( msg ) {
console.log( 'Received application data' );
console.log( msg.toString('utf8') );
setTimeout(function() {
console.log( 'Sending application data' );
client.send( new Buffer( process.argv[2] +': cpt=' + (cpt++) +'\n' ) );
}, 1000);
});
Modifier server.js
"use strict";
var dtls = require( '../' );
var fs = require( 'fs' );
dtls.setLogLevel( dtls.logLevel.INFO );
var cert = fs.readFileSync( 'cert.pem' );
var key = fs.readFileSync( 'key.pem' );
var server = dtls.createServer({
type: 'udp4',
key: key,
cert: cert
});
server.bind( 4433 );
server.on( 'secureConnection', function( socket ) {
console.log( 'New connection from ' +
[ socket.rinfo.address, socket.rinfo.port ].join(':') );
socket.on( 'message', function( message ) {
// Get the ascii encoded text content and trim whitespace at the end.
var inText = message.toString( 'ascii' ).replace( /\s*$/, '' );
var outText = '[ECHO]' + inText + '[/ECHO]';
console.log( 'in: ' + inText );
console.log( 'out: ' + outText );
socket.send( new Buffer( outText + '\n', 'ascii' ) );
});
});
Générer un certificat en répondant aux questions
openssl req -newkey rsa:2048 -new -nodes -x509 -days 365 -keyout key.pem -out cert.pem
Exécuter dans un terminal 1
node server.js
Exécuter dans un terminal 2
node client.js CLIENT1
Exécuter dans un terminal 3
node client.js CLIENT2