wolfssl-nginx icon indicating copy to clipboard operation
wolfssl-nginx copied to clipboard

Enhancement making wolfssl compatible with socket level WAF

Open osevan opened this issue 1 year ago • 2 comments

Spock slaf is WAF at library level and works for openssl.

Could someone of devs make adoption for wolfssl too?

https://medium.com/@coolerlair/library-application-firewall-19317d3e54c9 I dont know why, but github project link disappeared :-(

https://antonio-cooler.gitbook.io/coolervoid-tavern/library-application-firewall

https://www.reddit.com/user/CoolerVoid/

Thanks and

Best regards

osevan avatar Dec 13 '23 00:12 osevan

Hi @osevan ,

Thanks for your interest in wolfSSL. I've looked into Spock SLAF and it looks like it depends on SSL_get_rfd and SSL_get_wfd, which our OpenSSL compatibility layer does not currently support. We could add these APIs and support for Spock SLAF as a feature request or with some code consulting time, depending on your priority and resources. Please contact us at support [AT] wolfssl [DOT] com to set this up.

kareem-wolfssl avatar Dec 13 '23 17:12 kareem-wolfssl

Its not high priority, but will be cool to have ofc.

osevan avatar Dec 14 '23 08:12 osevan