Re: [9fans] TLSServer?

["Russ Cox" <rsc@swtch.com>]

> I need to write a Unix application that uses TLS/SSL.  I
> looked at using OpenSSL, but lordy mama -- what an interface.
> Since I only need to do the server side of the communication,
> I thought perhaps the Plan 9 tls stuff could be used.
>
> Comments?  How much work would it be to get the current
> code working in a Unix environ?

Step 1.  Write a kernel driver to do the TLS record-layer marshalling.
Not so easy.

If you want the Plan 9 interface (just pushtls and use the resulting fd
in normal I/O), the right thing to do seems to be to create a pipe and
then run openssl in a child encrypting between the pipe and your old fd.
Then you can use the pipe as your normal encrypted fd.  There was a
library that did this (either with or without SSL) (by someone in
Australia, perhaps?) but I cannot find it online anymore.  Presumably
it's not _too_ hard to write the appropriate program using OpenSSL
(maybe it's even an example).  The pipe+exec code is trivial.

I think Dong Lin has code that does this somewhere.

Russ