GitHub - vadims/sslconn: Experimental golang wrapper around OpenSSL

vadims / sslconn Public

Notifications You must be signed in to change notification settings
Fork 7
Star 18

Experimental golang wrapper around OpenSSL

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
README		README
cert.c		cert.c
cert.go		cert.go
cgo_binding.h		cgo_binding.h
conn.c		conn.c
conn.go		conn.go
conn.h		conn.h
error.c		error.c
error.h		error.h
nb_reader.go		nb_reader.go
nb_writer.go		nb_writer.go
private_key.c		private_key.c
private_key.go		private_key.go
thread.c		thread.c
thread.h		thread.h
util.go		util.go

Repository files navigation

SSLConn

This is an experimental golang (CGO) wrapper around OpenSSL.

The crypto/tls package does not support (1) SSLv2 compatible handshakes,
so this is an attempt to use OpenSSL in golang. The reason SSLv2 handshake
is desired is for compatibility (2) with a variety of clients.

The suggested approach is to provide SSL termination upstream, however 
some protocols upgrade plain text connections using STARTTLS (3) which 
would require a smart and protocol aware SSL terminator.

This wrapper only exposes only a tiny subset of the OpenSSL API, just
enough to enable the use-case described above.

Examples: github.com/vadims/sslconn-examples

Implementation Details

In order to multiplex a OpenSSL connection the underlying IO needs to
be non blocking. To support that, a NonBlockingReader and NonBlockingWriter
were implemented to provide the necessary semantics.

Most of the OpenSSL integration is done in C to avoid locking the OS 
thread required for error checking (thread locals.) 

1. http://code.google.com/p/go/issues/detail?id=3930
2. http://www.openssl.org/docs/ssl/SSL_CTX_new.html
3. http://en.wikipedia.org/wiki/STARTTLS