bartoszek/zephyr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

net: tls: Add DTLS protocol types

Browse Source 
Define DTLS protocol types and and Kconfig option to enable DTLS
support.

Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
This commit is contained in:
Robert Lubos 2018-08-06 14:31:07 +02:00 committed by Jukka Rissanen
parent 8b1f966b12
commit 85db974ec3
3 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
include/net/net_ip.h
View File

@ -59,6 +59,8 @@ enum net_ip_protocol_secure {
IPPROTO_TLS_1_0 = 256,
IPPROTO_TLS_1_1 = 257,
IPPROTO_TLS_1_2 = 258,
IPPROTO_DTLS_1_0 = 272,
IPPROTO_DTLS_1_2 = 273,
};
/** Socket type */

7
subsys/net/lib/sockets/Kconfig
View File

@ -36,6 +36,13 @@ config NET_SOCKETS_SOCKOPT_TLS
Enable TLS socket option support which automatically establishes
a TLS connection to the remote host.
config NET_SOCKETS_ENABLE_DTLS
bool "Enable DTLS socket support [EXPERIMENTAL]"
depends on NET_SOCKETS_SOCKOPT_TLS
select TLS_DTLS
help
Enable DTLS socket support. By default only TLS over TCP is supported.
config NET_SOCKETS_TLS_MAX_CONTEXTS
int "Maximum number of TLS/DTLS contexts"
default 1

9
subsys/net/lib/sockets/sockets_tls.c
View File

@ -738,15 +738,14 @@ int ztls_socket(int family, int type, int proto)
enum net_ip_protocol_secure tls_proto = 0;
int sock, ret, err;
if (proto >= IPPROTO_TLS_1_0 && proto <= IPPROTO_TLS_1_2) {
/* Currently DTLS is not supported,
* so do not allow to create datagram socket
*/
if ((proto >= IPPROTO_TLS_1_0 && proto <= IPPROTO_TLS_1_2) ||
(proto >= IPPROTO_DTLS_1_0 && proto <= IPPROTO_DTLS_1_2)) {
#if !defined(CONFIG_NET_SOCKETS_ENABLE_DTLS)
if (type == SOCK_DGRAM) {
errno = ENOTSUP;
return -1;
}
#endif
tls_proto = proto;
proto = (type == SOCK_STREAM) ? IPPROTO_TCP : IPPROTO_UDP;
}