wolfMQTT icon indicating copy to clipboard operation
wolfMQTT copied to clipboard

Support for DTLS?

Open HendrikVE opened this issue 2 years ago • 2 comments

Since paho.mqtt-sn.embedded-c has support for DTLS it would be awesome if wolfMQTT had support for this as well. Are there any plans for this? As wolfMQTT uses wolfSSL, which supports DTLS, this looks like a perfect fit to me :P

HendrikVE avatar Jan 25 '22 16:01 HendrikVE

Hello @HendrikVE

Yes! This is something we are discussing. Do you have any specific requirements for the DTLS encryption? Would you be able to provide feedback / testing?

embhorn avatar Jan 25 '22 16:01 embhorn

Nothing special I guess. Personally I would like to use DTLS for the sn-client using PSK and maybe also RPK which are also the options supported by RIOT and CoAP right now, but the paho gateway seems to only support X.509 at the moment. I hope adding e.g. PSK to paho should not be too complicated and I might take a look at it myself. I would be happy to support you with some testing feedback :)

HendrikVE avatar Jan 26 '22 10:01 HendrikVE

Hello @HendrikVE

Yes! This is something we are discussing. Do you have any specific requirements for the DTLS encryption? Would you be able to provide feedback / testing?

I would like to try a DTLS connection between some MQTT-SN clients and a Gateway/RSBM. I'm currently working on an academic project where this feature would be extremely useful. Is there any update on the timeline for DTLS support? I'd be more than happy to provide feedback and participate in testing.

Best ,

fj-blanco avatar Oct 03 '23 19:10 fj-blanco

Hi @fj-blanco

The wolfMQTT client library for MQTT-SN added support for DTLS in the PR: https://github.com/wolfSSL/wolfMQTT/pull/348

We'd love to hear your feedback!

@HendrikVE - I'll go ahead and mark this issue as closed.

embhorn avatar Oct 03 '23 19:10 embhorn

Hi @fj-blanco

The wolfMQTT client library for MQTT-SN added support for DTLS in the PR: #348

We'd love to hear your feedback!

@HendrikVE - I'll go ahead and mark this issue as closed.

Thanks. The point was, right now wolfSSL seems like the only way to go for DTLS 1.3 (interesting for PQ for example). But wolfSSL's MQTT-SN is just the client, right? As far as I know, there's no Gateway/RSBM/broker that works with wolfSSL for DTLS, so setting up MQTT-SN communication over DTLS 1.3 doesn't seem straightforward. That's why I think DTLS support in wolfMQTT would be interesting.

fj-blanco avatar Oct 03 '23 20:10 fj-blanco

@fj-blanco

Right! We would need to write our own gateway, or modify the Paho MQTT-SN gateway to support wolfSSL.

I've created a new issue for this https://github.com/wolfSSL/wolfMQTT/issues/358

embhorn avatar Oct 03 '23 20:10 embhorn