Re: Patch: wtls provision

Hi,

I forgot to mention that, pretty much all wtls states are supported except 2:

1) Suspend/resume wtls session
2) Cipher change when already connected

Again, I have not come across these states when testing with a variety of mobiles. In practice (2) is implemented through another client hello while already connected to the same client.

BR,
Nikos
  ----- Original Message ----- 
  From: Nikos Balkanas 
  To: [email protected] 
  Sent: Monday, November 02, 2009 4:56 PM
  Subject: Patch: wtls provision


  Dear friends,

  This is a long overdue contribution to kannel's wap. It will provide wtls functionality. It has been thoroughly tested in Solaris, and compiles cleanly in Linux.

  I used indent to format the structure, so a lot of the differences will be formatting. Nevertheless, there is a lot of code in there that needed to make it work. Let me know if the cvs diff is the best way to submit it, or whether a tarball of the sources would be better. I've have had some issues with cvs diff in the past, so if you get any compilation warnings, I may have to go with a tarball.

  In particular it will provide:

  A) Supported MACs:

          SHA_0,
          SHA_40,
          SHA_80,
          SHA_NOLIMIT,
          MD5_40,
          MD5_80,
          MD5_NOLIMIT

  MIA's:
           SHA_XOR_40

  B) Supported Ciphers:

          RC5_CBC_40,
          RC5_CBC_56,
          RC5_CBC,
          DES_CBC,
          DES_CBC_40

  MIA's:
          NULL_bulk,
          TRIPLE_DES_CBC_EDE,
          IDEA_CBC_40,
          IDEA_CBC_56,
          IDEA_CBC

  C) Supported Keys:

          RSA_anon

  MIA's:
          RSA_anon_512,
          RSA_anon_768,
          RSA_NOLIMIT,
          RSA_512,
          RSA_768,
          ECDH_anon,
          ECDH_anon_113,
          ECDH_anon_131,
          ECDH_ECDSA_NOLIMIT

  Keys might seem a shortcoming, but I have yet to see a mobile that doesn't support RSA_anon. I do expect that a few of the rest of the keys are supported as well (i.e. RSA_anon_512, RSA_anon_768) just didn't have the chance to test them.

  Please vote and decide,
  Nikos