SSL / TLS

[AdamMiltonBarker]

Is it possible to set a CoAP server with SSL or TLS for secure communication?

[kaleemullah360]

With my Understanding CoAP runs over UDP layer. so can't use SSL / TLS but we can use DTLS (Data Link Security). more over if we implement CoAP over TCP then goal can be achieved.

[AdamMiltonBarker]

Hi thanks for the repy. I saw some info on that isn't DTLS not available in Node JS though meaning you can't make secure calls with this or have I read wrong.

[mcollina]

CoAP runs over UDP, but there is some effort in porting it to TCP and TLS. DTLS (tls for udp), is not currently supported in core, even though there is a js-only thing that we might integrate.

I am fine if anyone would like to implement https://tools.ietf.org/html/draft-tschofenig-core-coap-tcp-tls-04, or any follow up on that, I will be more than happy to give them the commit bit and the lead maintainer role on this project.

[AdamMiltonBarker]

Yes I saw that just wanted confirmation that it wasn't possible.

[mcollina]

Duplicate of #11

[AdamMiltonBarker]

5 year later I was looking for this solution and found my own post :D Has DTLS not been added yet ?

[JKRhb]

5 year later I was looking for this solution and found my own post :D Has DTLS has not been yet ?

Not yet, unfortunately :/ (see #253). However, there is now at least one package for DTLS which should make it possible to finally add this feature. I will surely have a look into it soon :)

[AdamMiltonBarker]

No worries will check it out thanks for the reply.

[JKRhb]

No worries will check it out thanks for the reply.

You're welcome :) There is another CoAP implementation which already has support for DTLS which you could try out in the meantime: https://github.com/AlCalzone/node-coap-client As its name suggests it only has client support, however.

[AdamMiltonBarker]

I found this also which is based on your project, it has a DTLS server also: https://github.com/neustar/node-coap-dtls not sure if the server is fully functioning yet, it says in the README not but will check it out

[JKRhb]

I found this also which is based on your project, it has a DTLS server also: https://github.com/neustar/node-coap-dtls not sure if the server is fully functioning yet, it says in the README not but will check it out

Ah, very cool, though :) Maybe it is possible to introduce some of the code in this repo as well // CC @jspark311

[jspark311]

@JKRhb Oh, wow. I forgot this repo existed. I haven't worked for Neustar since 2018. I no longer have any control over that repo. :-(