Re: ssl-wrapping the boa web-server

On Sun, Jul 18, 2004 at 02:31:00PM +0200, Cristian Ionescu-Idbohrn wrote:
> I'm trying to ssl-wrap the web-server boa in an embeded environment. I
> found the matrixssl library to be appropriate for such environment,
> being much smaller than openssl.
> 
> I also found sslio in the ipsvd-package and thought of using it to do
> the job. Problem is I can't figure out if/how I can put things
> together.

sslio can be put in between a service daemon, tcpsvd or tcpserver, and
a service program in the process chain.  If boa can run as a service
program, or also called in inetd mode, you should be able to set it up
similar to fnord

 http://smarden.org/ipsvd/examples.html#tcp

> Actually, I believe what I'm looking for is an stunnel lookalike thing
> built against libmatrixssl. I think that would be the shortest path,
> but I couldn't find anything like this lying around ;-)

sslio doesn't deal with sockets, only with filedescriptors.  If you
can't get boa to run as service program, you might get it working by
using ucspi-proxy, tcpsvd, sslio, and tcpclient, but I'm not sure that
you like to have that many processes involved.

Regards, Gerrit.