Re: [lwip-users] Elevating existing connection to TLS

[address@hidden]

Am 28.04.2020 um 17:55 schrieb Josh McAtee:
> Hello!
>
> I was wondering if there was a "simple" way to take an existing TCP
> connection and make it TLS.

I'm not sure I understand what you want?

> For example, STARTTLS in SMTP starts with a non-encrypted connection,
> then switches to encrypted after some back and forth, using the existing
> connection.
> I was looking at the code wondering how to achieve this, and it didn't
> seem clear to me how to do it.
> Anyone have experience with this?

We do have "altcp" where the existing tcp callback API is used slightly
modified and you can put a TLS layer between your appilcation and the
actual tcp connection. The application may thus be unaware of TLS being
used.

Is this what you mean?

Regards,
Simon