gnutls with unix domain (local) sockets

[Arturo Martinez Rubio]

Hi everyone,

Does anyone know if gnutls works over unix domain sockets?
For example:

sock = socket(PF_UNIX, SOCK_STREAM, 0);
...
gnutls_transport_set_ptr(session, sock);
...

Thanks,
Arturo M.

_______________________________________________
Help-gnutls mailing list
Help-gnutls@...
http://lists.gnu.org/mailman/listinfo/help-gnutls

[Nikos Mavrogiannopoulos]

Arturo Martinez Rubio wrote:
> Hi everyone,
>
> Does anyone know if gnutls works over unix domain sockets?
> For example:
>
> sock = socket(PF_UNIX, SOCK_STREAM, 0);
> ...
> gnutls_transport_set_ptr(session, sock);
> ...

It does. What would be the benefit of such an operation though?




_______________________________________________
Help-gnutls mailing list
Help-gnutls@...
http://lists.gnu.org/mailman/listinfo/help-gnutls

[Arturo Martinez Rubio]

Well, basically the benefit is that UNIX sockets are supposed to have better performance that TCP sockets. In my specific case, the applications which will communicate using TLS are running in the same machine.

Thanks for your answer,
Arturo

2008/9/29 Nikos Mavrogiannopoulos <nmav@...>

Arturo Martinez Rubio wrote:
> Hi everyone,
>
> Does anyone know if gnutls works over unix domain sockets?
> For example:
>
> sock = socket(PF_UNIX, SOCK_STREAM, 0);
> ...
> gnutls_transport_set_ptr(session, sock);
> ...

It does. What would be the benefit of such an operation though?

_______________________________________________
Help-gnutls mailing list
Help-gnutls@...
http://lists.gnu.org/mailman/listinfo/help-gnutls

[Lennart Koopmann-3]

Am Montag, den 29.09.2008, 16:44 +0300 schrieb Arturo Martinez Rubio:
> In my specific case, the applications which will communicate using TLS
> are running in the same machine.

Isn't TLS pretty useless if used for interprocess communication? Or does
some kind of server that is running on the local machine require TLS?




_______________________________________________
Help-gnutls mailing list
Help-gnutls@...
http://lists.gnu.org/mailman/listinfo/help-gnutls

[Florian Weimer-2]

* Lennart Koopmann:

> Am Montag, den 29.09.2008, 16:44 +0300 schrieb Arturo Martinez Rubio:
>> In my specific case, the applications which will communicate using TLS
>> are running in the same machine.
>
> Isn't TLS pretty useless if used for interprocess communication? Or does
> some kind of server that is running on the local machine require TLS?

Some applications use UNIX domain sockets in /tmp, where the identity
of the peer is less than clear.  It's been suggested to use TLS in
this scenario.

(Personally, I think using a separate directory, writable by the
appropriate user, is a better choice, perhaps combined with
credentials passing.)

--
Florian Weimer                <fweimer@...>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: [phone]
D-76133 Karlsruhe             fax: [phone]


_______________________________________________
Help-gnutls mailing list
Help-gnutls@...
http://lists.gnu.org/mailman/listinfo/help-gnutls