This patch adds TLS/DTLS Heartbeats, as described in 
tools.ietf.org/html/draft-ietf-tls-dtls-heartbeat

Heartbeats can be sent any time when no handshake is in progress to check the 
availability of the peer. The retransmission feature of DTLS is used to repeat 
lost Heartbeats. If no response is received, the peer is considered unavailable 
and an SSL timeout error occurs. Heartbeats can be sent with SSL_heartbeat() 
and SSL_heartbeat_pending() can be used to check if one is still in flight. The 
option SSL_OP_NO_HB_REQUEST can be set to not allow the peer to send 
HeartbeatRequests, which is useful for devices powered with a battery.

This is a preliminary version, because the IANA has not yet assigned the 
necessary numbers for the Heartbeat protocol and the Hello extensions.

Best regards
Robin





This patch adds TLS/DTLS Heartbeats, as described in tools.ietf.org/html/draft-ietf-tls-dtls-heartbeat

Heartbeats can be sent any time when no handshake is in progress to check the availability of the peer. The retransmission feature of DTLS is used to repeat lost Heartbeats. If no response is received, the peer is considered unavailable and an SSL timeout error occurs. Heartbeats can be sent with SSL_heartbeat() and SSL_heartbeat_pending() can be used to check if one is still in flight. The option SSL_OP_NO_HB_REQUEST can be set to not allow the peer to send HeartbeatRequests, which is useful for devices powered with a battery.

This is a preliminary version, because the IANA has not yet assigned the necessary numbers for the Heartbeat protocol and the Hello extensions.

Best regards
Robin




Attachment: dtls-tls-heartbeats-1.0.1.patch
Description: Binary data

Reply via email to