feat: IPROTO traffic encryption
Add new transport for IPROTO connections: ssl. SSL transport may be configured with (at client and server side): - certificate (mandatory at server side) - private key (mandatory at server side) - password for PK - certificate authorities (for peer certificate verification) - cipher list SSL transport also can be used in replication and net.box mechanisms. @TarantoolBot document Title: add IPROTO traffic encryption. New ssl transport allows creating a secure connection between two IPROTO peers. TLS protocol using and openssl v1.1 or later required. To configure traffic encryption, you need to set the special URI parameters for a particular connection. The parameters can be set for the following box.cfg options and nex.box method: - box.cfg.listen – on the server side. - box.cfg.replication–on the client side. - net_box_object.connect()–on the client side.
Showing
- CMakeLists.txt 1 addition, 0 deletionsCMakeLists.txt
- changelogs/unreleased/encrypted-iproto.md 10 additions, 0 deletionschangelogs/unreleased/encrypted-iproto.md
- src/lib/core/CMakeLists.txt 2 additions, 0 deletionssrc/lib/core/CMakeLists.txt
- src/lib/core/iostream.h 8 additions, 0 deletionssrc/lib/core/iostream.h
- src/lib/core/sio.c 56 additions, 0 deletionssrc/lib/core/sio.c
- src/lib/core/sio.h 22 additions, 0 deletionssrc/lib/core/sio.h
- src/lib/core/ssl_error.cc 0 additions, 4 deletionssrc/lib/core/ssl_error.cc
- src/lib/core/ssl_error.h 0 additions, 7 deletionssrc/lib/core/ssl_error.h
- src/lib/core/ssl_impl.c 560 additions, 0 deletionssrc/lib/core/ssl_impl.c
- src/lib/core/ssl_impl.h 66 additions, 0 deletionssrc/lib/core/ssl_impl.h
- test/box-luatest/transport_test.lua 0 additions, 25 deletionstest/box-luatest/transport_test.lua
- test/ssl-luatest/basic_test.lua 510 additions, 0 deletionstest/ssl-luatest/basic_test.lua
- test/ssl-luatest/certs/ca-sign-cert.crt 22 additions, 0 deletionstest/ssl-luatest/certs/ca-sign-cert.crt
- test/ssl-luatest/certs/ca-sign-key.key 28 additions, 0 deletionstest/ssl-luatest/certs/ca-sign-key.key
- test/ssl-luatest/certs/ca.pem 21 additions, 0 deletionstest/ssl-luatest/certs/ca.pem
- test/ssl-luatest/certs/client/ca-sign-cert.crt 22 additions, 0 deletionstest/ssl-luatest/certs/client/ca-sign-cert.crt
- test/ssl-luatest/certs/client/ca-sign-key.key 28 additions, 0 deletionstest/ssl-luatest/certs/client/ca-sign-key.key
- test/ssl-luatest/certs/client/self-sign-cert.pem 34 additions, 0 deletionstest/ssl-luatest/certs/client/self-sign-cert.pem
- test/ssl-luatest/certs/client/self-sign-key.pem 52 additions, 0 deletionstest/ssl-luatest/certs/client/self-sign-key.pem
- test/ssl-luatest/certs/pw-wrong.txt 2 additions, 0 deletionstest/ssl-luatest/certs/pw-wrong.txt
Loading
Please register or sign in to comment