[lwip-users] Re: Re: SSL / HTTPS above lwIP

[Walter Saegesser]

Thanks, Joe.
>From the e-mail contacts I had I got a good impression of PeerSec (MatixSSL) 
>too. I did not expect that someone should make a decision for me, but for the 
>decision making your input is quite helpful.

Walter

_______________________________________________
Walter Saegesser
Dipl.-Ing. (FH)
R&D - Software
Business Unit IMS - Line of Business Solar Inverter
_______________________________________________
Delta Renewable Energy Systems (Switzerland) AG
Burgerfeldstrasse 19, CH-8730 Uznach SG, Switzerland
TEL:       +41 (0)55 246-4140
FAX:      +41 (0)55 246-4116
address@hidden
www.deltaenergysystems.com
_______________________________________________


-----Original Message-----
From: address@hidden [mailto:address@hidden On Behalf Of address@hidden
Sent: Montag, 21. März 2011 17:00
To: address@hidden
Subject: lwip-users Digest, Vol 91, Issue 25

Send lwip-users mailing list submissions to
        address@hidden

To subscribe or unsubscribe via the World Wide Web, visit
        http://lists.nongnu.org/mailman/listinfo/lwip-users
or, via email, send a message with subject or body 'help' to
        address@hidden

You can reach the person managing the list at
        address@hidden

When replying, please edit your Subject line so it is more specific
than "Re: Contents of lwip-users digest..."


Today's Topics:

   1. Re: SSL / HTTPS above lwIP (Joe Eykholt)


----------------------------------------------------------------------

Message: 1
Date: Sun, 20 Mar 2011 22:36:44 -0700
From: Joe Eykholt <address@hidden>
Subject: [lwip-users] Re: SSL / HTTPS above lwIP
To: address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed


> Date: Fri, 18 Mar 2011 08:55:52 +0100
> From: "Walter Saegesser"<address@hidden>
> Subject: [lwip-users] SSL / HTTPS above lwIP

> I have been working with lwIP for a few months now and it really works
> fine.
>
> Now I got the job to implement an HTTPS client, sending data to a server
> on the internet periodically. As far as I understand this is not a
> matter of the underlying TCP/IP stack. A SSL stack as well as an HTTP
> client reside in the application layer, don't they?

Yes.  At least, according to Wikipedia.  Maybe it should be though of as
an application to the transport layer below it and as a transport to
the application above it.  But I could be all wet.

 > So there's no need
> to switch to another TCP/IP stack, e.g. commercial Interniche? Or am I
> wrong here?

Nothing inherent in SSL would make that necessary, but depending on
which SSL implementation you choose, it may have more natural interfaces
with another TCP/IP stack.

> Would there be a need to change the configuration of lwIP? Sorry, these
> may all be silly questions, but I simply don't know.

I can't think of a need.

> The other question is what SSL stack to use. There are open source
> solutions as CyaSSL or OpenSSL. (CyaSSL is claimed to be faster and up
> to 20 times smaller than OpenSSL). And there are commercial stacks like
> NicheStack SSL from Interniche or MatrixSSL from PeerSec.
>
> If anyone has experience with this subject, any advice - DOs and DON'Ts
> - would be appreciated a lot. Thanks in advance.

> Walter

I asked the same question here a while back and didn't see a response.
It's a very tough question to answer with any authority because there
are so many variables, depending on your application and environment.

I tried CyaSSL, PolarSSL, and matrixssl, they're all available both
open-source and commercially, and all will work over lwip.  You have
to decide which is best for your needs, but for me matrixssl fit best.
I think it's code size is similar to or smaller than the others and
maybe its RAM usage is a bit less, and has smaller stack usage.

I liked its interfaces because they're all asynchronous, if I recall,
or at least can be used that way.  I didn't want a separate thread for
each connection.  I didn't benchmark them.

I still don't have a much experience with this subject, but thought
I'd offer this anyway.  I'd be very interested in other opinions.

        Cheers,
        Joe



------------------------------

_______________________________________________
lwip-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/lwip-users

End of lwip-users Digest, Vol 91, Issue 25
******************************************
********************************************************************************************************************************
This email message, including any attachments, is for the sole use of the 
intended recipient(s) and may contain 
confidential and privileged information. Any unauthorized review, use, 
disclosure or distribution is prohibited. 
If you are not the intended recipient, please contact the sender by reply 
e-mail and destroy all copies of the original message. 
[Delta Energy Systems]
********************************************************************************************************************************