Q: Add DTLS 1.2 support in LibreSSL

[signmgr]

Hi,

Are there any plans to add the support for DTLS 1.2?
If yes, what is the road map for that?

Thanks in advance!

/Misha

[signmgr]

Hi,

Can anyone answer about the plans to include DTLS 1.2 support in LibreSSL?

Thanks a lot in advance!

/Misha

[4a6f656c]

It will happen, but at this stage it is not a super high priority. There has been a lot of work done to deduplicate the DTLS/TLS code (the original DTLS code was effectively a copy and paste of the SSLv3/TLS code, with minor changes) - this makes it relatively easy to now enable DTLSv1.2 and I have a tree that does most of this, but it needs some more time and effort from someone, in order to finish the job.

[signmgr]

Hi Joel,

Thanks a lot for your response!

May I also wonder about the future of DTLS/SCTP support?
As I know DTLS/SCTP support was removed since LibreSSL v2.1.4.
Are there any plans to return the functionality back after you have finished with DTLS/TLS decoupling?

Thanks a lot in advance!

/Misha

[tuxillo]

Still not supported?

[kinichiro]

Expose various DTLSv1.2 specific functions and defines
openbsd/src@e6d8839

[4a6f656c]

Support for DTLSv1.2 is available in the current development release (3.3.2) and will be available in the next stable release.