[zeromq-dev] Confirm authentication and retrieve metadata?

[Pieter Hintjens]

zmq_connect doesn't expose security failures at all. These are visible
in the server side via ZAP, and in the client side via monitor events.
Also we added logging to libzmq in such cases.

You should read the CZMQ zauth class, and look at the examples on
http://hintjens.com/blog:48. These will help a lot probably.

If you are building a new Ruby wrapper then look at
https://github.com/methodmissing/rbczmq.

-Pieter

On Thu, Apr 9, 2015 at 3:59 AM, Stephen Eley <sfeley at gmail.com> wrote:
> Hi all,
>
> I'm trying to build a Ruby wrapper with simple support for some of 0mq's
> newer features, including encryption and authentication. I believe I have a
> pretty good handle on the socket options and how the ZAP authentication
> handler needs to work. However, I've been conceptually hung up on how to
> detect and pass failures back to the user application, and scouring Google
> and the source code hasn't helped.
>
> My questions:
>
> 1. The RFCs all say that server sockets are to disconnect in the event of a
> CURVE key or ZAP authentication failure. But the zmq_connect call doesn't
> appear to wait for any of that, and even with ZMQ_IMMEDIATE set it doesn't
> seem to have any relevant error codes. Short of setting up a
> zmq_socket_monitor and listening for disconnect events in a dedicated
> thread, is there any way I can figure out on the client end that a
> connection never cleared security?
>
> 2. If I did take the zmq_socket_monitor route, is there any way to tell the
> difference between a ZMQ_EVENT_DISCONNECTED that happened because of a CURVE
> or ZAP failure and one that happened for any other reason?
>
> 3. The ZAP protocol defines a frame for a user ID "for use by applications."
> There's another one for metadata with similar intent. However, I can't
> figure out how the application is supposed to get ahold of that data. I see
> that 0mq 4.1 has a zmq_msg_gets function for metadata on every message, but
> that doesn't help current production users, and querying on received
> messages seems like an odd place to get connection-level information that's
> given exactly once. If that future functionality is the only way, how does
> one go about getting metadata on a send-only socket?
>
> Apologies if these are dumb questions and I missed something obvious. And
> thanks in advance for any tips or pointers to example code.
>
>
> Have Fun,
> Steve Eley
>
>
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev
>