ssl

[Phoenix Sol]

Hello,

I am new to Io, coming from Stackless Python. I have to say that I love it;
I already have the attitude that no matter what shortcomings it may have
(not that I have found any yet), they are worth overcoming.

I am wondering if there exists any SSL bindings? My first task with Io is to
get friendly with Amazon Web Services. I would like to implement something
like Boto (Python),
but I'm not a C programmer (yet), so a lack of SSL bindings could well be a
'show stopper' for me.

Thanks =)

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Jeremy Tregunna]

It doesn't have any, but that shouldn't stop you from using SSL  
bindings available for Python through the Python bridge.
--
Jeremy Tregunna
jtregunna@...



On 12-Jun-08, at 3:56 PM, Phoenix Sol wrote:

> Hello,
>
> I am new to Io, coming from Stackless Python. I have to say that I  
> love it; I already have the attitude that no matter what  
> shortcomings it may have (not that I have found any yet), they are  
> worth overcoming.
>
> I am wondering if there exists any SSL bindings? My first task with  
> Io is to get friendly with Amazon Web Services. I would like to  
> implement something like Boto (Python),
> but I'm not a C programmer (yet), so a lack of SSL bindings could  
> well be a 'show stopper' for me.
>
> Thanks =)
>
> --
> Phoenix Sol
> 541-646-8612
> 130 'A' Street,
> Suite 6
> Ashland, Oregon
> 97520

[Nick Guenther]

On Thu, Jun 12, 2008 at 3:56 PM, Phoenix Sol <phoenix@...> wrote:
> Hello,
>
> I am new to Io, coming from Stackless Python. I have to say that I love it;
> I already have the attitude that no matter what shortcomings it may have
> (not that I have found any yet), they are worth overcoming.

yes yes yes yes yes. I say: we can make it overcome those shortcomings.

>
> I am wondering if there exists any SSL bindings? My first task with Io is to
> get friendly with Amazon Web Services. I would like to implement something
> like Boto (Python),
> but I'm not a C programmer (yet), so a lack of SSL bindings could well be a
> 'show stopper' for me.

A quick browse of the addon source folder and the docs
<http://iolanguage.com/scm/git/checkout/Io/docs/IoReference.html#Socket>
will show there is no SSL binding, but: there is the IoPython bridge
which you can use in the meantime until Io gets more extensions of its
own.
Use it something like this (warning: untested, and you may need to
check out the latest source which now includes support for sending Io
lists to python):
Io> skt = Python import("socket")
Io> sock := skt ssl(skt socket(list("amazon.com",80)))
Io>
(this code is untested, but gives you the general idea)

-Nick

[Phoenix Sol]

Well, thanks Jeremy. I think it's really cool that Io can pull in Python
stuff, and I'm sure I will end up using it.. but I'm leary of the
performance impact of calling Python. I would much rather call CFunctions.
(It's time for me to learn C ;-)

On Thu, Jun 12, 2008 at 1:51 PM, Jeremy Tregunna <jtregunna@...>
wrote:

>   It doesn't have any, but that shouldn't stop you from using SSL bindings
> available for Python through the Python bridge.
> --
> Jeremy Tregunna
> jtregunna@...
>
>
>
> On 12-Jun-08, at 3:56 PM, Phoenix Sol wrote:
>
> Hello,
>
> I am new to Io, coming from Stackless Python. I have to say that I love it;
> I already have the attitude that no matter what shortcomings it may have
> (not that I have found any yet), they are worth overcoming.
>
> I am wondering if there exists any SSL bindings? My first task with Io is
> to get friendly with Amazon Web Services. I would like to implement
> something like Boto (Python),
> but I'm not a C programmer (yet), so a lack of SSL bindings could well be a
> 'show stopper' for me.
>
> Thanks =)
>
> --
> Phoenix Sol
> 541-646-8612
> 130 'A' Street,
> Suite 6
> Ashland, Oregon
> 97520
>
>
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Steve Dekorte]

On 2008-06-12, at 1:51 PM, Jeremy Tregunna wrote:
> It doesn't have any, but that shouldn't stop you from using SSL  
> bindings available for Python through the Python bridge.

That's a neat idea, might have to be careful to avoid issues with  
blocking sockets though. Another trick is to use Curl via the  
SystemCall addon.

- Steve

[Phoenix Sol]

Thanks Nick, but wouldn't you lose all the benefits of Io's nice async
networking by using Python's socket library?
I mean, that's why I'm here.

On Thu, Jun 12, 2008 at 1:54 PM, Nick Guenther <kousue@...> wrote:

>   On Thu, Jun 12, 2008 at 3:56 PM, Phoenix Sol <phoenix@...<phoenix%40burninglabs.com>>
> wrote:
> > Hello,
> >
> > I am new to Io, coming from Stackless Python. I have to say that I love
> it;
> > I already have the attitude that no matter what shortcomings it may have
> > (not that I have found any yet), they are worth overcoming.
>
> yes yes yes yes yes. I say: we can make it overcome those shortcomings.
>
> >
> > I am wondering if there exists any SSL bindings? My first task with Io is
> to
> > get friendly with Amazon Web Services. I would like to implement
> something
> > like Boto (Python),
> > but I'm not a C programmer (yet), so a lack of SSL bindings could well be
> a
> > 'show stopper' for me.
>
> A quick browse of the addon source folder and the docs
> <http://iolanguage.com/scm/git/checkout/Io/docs/IoReference.html#Socket>
> will show there is no SSL binding, but: there is the IoPython bridge
> which you can use in the meantime until Io gets more extensions of its
> own.
> Use it something like this (warning: untested, and you may need to
> check out the latest source which now includes support for sending Io
> lists to python):
> Io> skt = Python import("socket")
> Io> sock := skt ssl(skt socket(list("amazon.com",80)))
> Io>
> (this code is untested, but gives you the general idea)
>
> -Nick
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Phoenix Sol]

I will have to insist on a binding to a C library, (and not involve Python).
I just don't think I'm capable of writing it properly until I study C (a
lot?) more.

On Thu, Jun 12, 2008 at 1:58 PM, Steve Dekorte <steve@...> wrote:

>
> On 2008-06-12, at 1:51 PM, Jeremy Tregunna wrote:
> > It doesn't have any, but that shouldn't stop you from using SSL
> > bindings available for Python through the Python bridge.
>
> That's a neat idea, might have to be careful to avoid issues with
> blocking sockets though. Another trick is to use Curl via the
> SystemCall addon.
>
> - Steve
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Steve Dekorte]

On 2008-06-12, at 2:02 PM, Phoenix Sol wrote:
> I will have to insist on a binding to a C library, (and not involve  
> Python).
> I just don't think I'm capable of writing it properly until I study  
> C (a lot?) more.


It looks like OpenSSL is the library to bind for this:

        http://www.openssl.org/

Here's the API info:

        http://www.openssl.org/docs/ssl/ssl.html

- Steve

[Phoenix Sol]

Thanks Steve =)

I think that's probably the right choice, but someone recently mentioned to
me that he was planning to use a much lighter one (I don't recall the
name...).

Anyway, I will look into it; maybe I can 'Gump' my way through it ;-)


On Thu, Jun 12, 2008 at 2:29 PM, Steve Dekorte <steve@...> wrote:

>
> On 2008-06-12, at 2:02 PM, Phoenix Sol wrote:
> > I will have to insist on a binding to a C library, (and not involve
> > Python).
> > I just don't think I'm capable of writing it properly until I study
> > C (a lot?) more.
>
> It looks like OpenSSL is the library to bind for this:
>
> http://www.openssl.org/
>
> Here's the API info:
>
> http://www.openssl.org/docs/ssl/ssl.html
>
> - Steve
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[James Costlow]

Phoenix,

I've recently had to delve into the world of OpenSSL and have actually  
been thinking about making an OpenSSL C binding for Io. This sounds  
like providence. I can help with the C coding and you can help me  
understand SSL ;)

- James


On Jun 12, 2008, at 5:45 PM, Phoenix Sol wrote:

> Thanks Steve =)
>
> I think that's probably the right choice, but someone recently  
> mentioned to me that he was planning to use a much lighter one (I  
> don't recall the name...).
>
> Anyway, I will look into it; maybe I can 'Gump' my way through it ;-)
>
>
>
> On Thu, Jun 12, 2008 at 2:29 PM, Steve Dekorte <steve@...>  
> wrote:
>
>
> On 2008-06-12, at 2:02 PM, Phoenix Sol wrote:
> > I will have to insist on a binding to a C library, (and not involve
> > Python).
> > I just don't think I'm capable of writing it properly until I study
> > C (a lot?) more.
>
> It looks like OpenSSL is the library to bind for this:
>
> http://www.openssl.org/
>
> Here's the API info:
>
> http://www.openssl.org/docs/ssl/ssl.html
>
> - Steve
>
>
>
> --
> Phoenix Sol
> 541-646-8612
> 130 'A' Street,
> Suite 6
> Ashland, Oregon
> 97520
>
>

[Steve Dekorte]

On 2008-06-12, at 2:45 PM, Phoenix Sol wrote:
> Thanks Steve =)
>
> I think that's probably the right choice, but someone recently  
> mentioned to me that he was planning to use a much lighter one (I  
> don't recall the name...).
>
> Anyway, I will look into it; maybe I can 'Gump' my way through it ;-)


When I have some time (maybe tonight) I'll try to take a look at it  
and get an addon started that anyone interested can contribute to.

[Phoenix Sol]

Thanks Steve, I'm practically giddy =)

On Thu, Jun 12, 2008 at 3:34 PM, Steve Dekorte <steve@...> wrote:

>
> On 2008-06-12, at 2:45 PM, Phoenix Sol wrote:
> > Thanks Steve =)
> >
> > I think that's probably the right choice, but someone recently
> > mentioned to me that he was planning to use a much lighter one (I
> > don't recall the name...).
> >
> > Anyway, I will look into it; maybe I can 'Gump' my way through it ;-)
>
> When I have some time (maybe tonight) I'll try to take a look at it
> and get an addon started that anyone interested can contribute to.
>
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Phoenix Sol]

That sounds like a swell idea, James, except I doubt I could help you
understand SSL any better than the docs ;-)

On Thu, Jun 12, 2008 at 3:24 PM, James Costlow <
anthem@...> wrote:

>   Phoenix,
>
> I've recently had to delve into the world of OpenSSL and have actually been
> thinking about making an OpenSSL C binding for Io. This sounds like
> providence. I can help with the C coding and you can help me understand SSL
> ;)
>
> - James
>
>
> On Jun 12, 2008, at 5:45 PM, Phoenix Sol wrote:
>
> Thanks Steve =)
>
> I think that's probably the right choice, but someone recently mentioned to
> me that he was planning to use a much lighter one (I don't recall the
> name...).
>
> Anyway, I will look into it; maybe I can 'Gump' my way through it ;-)
>
>
> On Thu, Jun 12, 2008 at 2:29 PM, Steve Dekorte <steve@...> wrote:
>
>>
>>
>> On 2008-06-12, at 2:02 PM, Phoenix Sol wrote:
>> > I will have to insist on a binding to a C library, (and not involve
>> > Python).
>> > I just don't think I'm capable of writing it properly until I study
>> > C (a lot?) more.
>>
>> It looks like OpenSSL is the library to bind for this:
>>
>> http://www.openssl.org/
>>
>> Here's the API info:
>>
>> http://www.openssl.org/docs/ssl/ssl.html
>>
>> - Steve
>>
>
>
>
> --
> Phoenix Sol
> 541-646-8612
> 130 'A' Street,
> Suite 6
> Ashland, Oregon
> 97520
>
>
>  

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Joseph Osborn]

Hi!  I actually wrote a nonblocking OpenSSL binding a little while ago called SecureSocket
which also supports DTLS1 (if the provided patches are made to OpenSSL 0.9.8e - they
hack around a bug in DTLS1).  

Also, the error handling is pretty lame, just printing output to the console.  But I hope it
will be useful.

http://joe.garbagecollective.org/SecureSocket.zip

--- In iolanguage@..., "Phoenix Sol" <phoenix@...> wrote:

>
> Hello,
>
> I am new to Io, coming from Stackless Python. I have to say that I love it;
> I already have the attitude that no matter what shortcomings it may have
> (not that I have found any yet), they are worth overcoming.
>
> I am wondering if there exists any SSL bindings? My first task with Io is to
> get friendly with Amazon Web Services. I would like to implement something
> like Boto (Python),
> but I'm not a C programmer (yet), so a lack of SSL bindings could well be a
> 'show stopper' for me.
>
> Thanks =)
>
> --
> Phoenix Sol
> 541-646-8612
> 130 'A' Street,
> Suite 6
> Ashland, Oregon
> 97520
>

[Phoenix Sol]

Thanks for 'kicking down', Joseph, I will take a look =)

On Thu, Jun 12, 2008 at 7:10 PM, Joseph Osborn <being@...> wrote:

>   Hi! I actually wrote a nonblocking OpenSSL binding a little while ago
> called SecureSocket
> which also supports DTLS1 (if the provided patches are made to OpenSSL
> 0.9.8e - they
> hack around a bug in DTLS1).
>
> Also, the error handling is pretty lame, just printing output to the
> console. But I hope it
> will be useful.
>
> http://joe.garbagecollective.org/SecureSocket.zip
>
>
> --- In iolanguage@... <iolanguage%40yahoogroups.com>, "Phoenix
> Sol" <phoenix@...> wrote:
> >
> > Hello,
> >
> > I am new to Io, coming from Stackless Python. I have to say that I love
> it;
> > I already have the attitude that no matter what shortcomings it may have
> > (not that I have found any yet), they are worth overcoming.
> >
> > I am wondering if there exists any SSL bindings? My first task with Io is
> to
> > get friendly with Amazon Web Services. I would like to implement
> something
> > like Boto (Python),
> > but I'm not a C programmer (yet), so a lack of SSL bindings could well be
> a
> > 'show stopper' for me.
> >
> > Thanks =)
> >
> > --
> > Phoenix Sol
> > 541-646-8612
> > 130 'A' Street,
> > Suite 6
> > Ashland, Oregon
> > 97520
> >
>
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Steve Dekorte]

On 2008-06-12, at 7:10 PM, Joseph Osborn wrote:

> Hi!  I actually wrote a nonblocking OpenSSL binding a little while  
> ago called SecureSocket
> which also supports DTLS1 (if the provided patches are made to  
> OpenSSL 0.9.8e - they
> hack around a bug in DTLS1).
>
> Also, the error handling is pretty lame, just printing output to the  
> console.  But I hope it
> will be useful.
>
> http://joe.garbagecollective.org/SecureSocket.zip

Thanks Joe - I've added it to the distribution. It didn't compile for  
me on OSX but it looks like it just needs some small fixes.

[Steve Dekorte]

On 2008-06-13, at 2:52 AM, Steve Dekorte wrote:
> Thanks Joe - I've added it to the distribution. It didn't compile for
> me on OSX but it looks like it just needs some small fixes.

Anthem sent a patch that fixes the OSX build. Looks like we have SSL  
support now. :-)

[Phoenix Sol]

Whoo-hoo! Thanks guys =)

On Fri, Jun 13, 2008 at 12:23 PM, Steve Dekorte <steve@...> wrote:

>
> On 2008-06-13, at 2:52 AM, Steve Dekorte wrote:
> > Thanks Joe - I've added it to the distribution. It didn't compile for
> > me on OSX but it looks like it just needs some small fixes.
>
> Anthem sent a patch that fixes the OSX build. Looks like we have SSL
> support now. :-)
>
>  
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Phoenix Sol]

Well, I remain enthusiastic. However, I'm having some trouble testing
SecureSocket.

I found that the doc* messages in the SecureSocket io files caused
exceptions "Exception: SecureServer does not respond to 'docSlot'" and
"Exception: SecureSocket does not respond to 'docCategory'". So I commented
them out for now.

But now I'm just getting seg-faults:
_________________________________________________________________________

phoenix@pyre:/usr/local/lib/io/addons/SecureSocket/tests$ io
SecureSocketTest.io
Segmentation fault
_________________________________________________________________________


Any idea what's amiss? Or what else I can try? I started a simple test
client, but so far it's also causing seg-faults (I don't even want to post
it at this point).

Thanks =)


On Fri, Jun 13, 2008 at 12:28 PM, Phoenix Sol <phoenix@...>
wrote:

> Whoo-hoo! Thanks guys =)
>
>
> On Fri, Jun 13, 2008 at 12:23 PM, Steve Dekorte <steve@...> wrote:
>
>>
>> On 2008-06-13, at 2:52 AM, Steve Dekorte wrote:
>> > Thanks Joe - I've added it to the distribution. It didn't compile for
>> > me on OSX but it looks like it just needs some small fixes.
>>
>> Anthem sent a patch that fixes the OSX build. Looks like we have SSL
>> support now. :-)
>>
>>  
>>
>
>
>
> --
> Phoenix Sol
> 541-646-8612
> 130 'A' Street,
> Suite 6
> Ashland, Oregon
> 97520
>

--
Phoenix Sol
541-646-8612
130 'A' Street,
Suite 6
Ashland, Oregon
97520

[Phoenix Sol]

Here is a minimal test case that causes a seg-fault:
_____________________________________________________

Io> sc := SecureClient clone
==>  SecureClient_0x81637d8:

Io> con := sc connectionToServer("https://ssl.scroogle.org/", 443)
Segmentation fault
______________________________________________________


On Fri, Jun 13, 2008 at 3:19 PM, Phoenix Sol <phoenix@...>
wrote:

> Well, I remain enthusiastic. However, I'm having some trouble testing
> SecureSocket.
>
> I found that the doc* messages in the SecureSocket io files caused
> exceptions "Exception: SecureServer does not respond to 'docSlot'" and
> "Exception: Se