[zeromq-dev] Zmq Security for the C# wrapper

[Robert Pickering]

Hello again,

Thanks for the advice Arnaud. I'm taking a look this morning it does
look reasonable straight forward to expose the security api, in fact
some of the work has already been started in clrzmq4, but looks like not
everything is there yet. One thing that's hindering me is that there
seems to have been quite a bit of renaming to the functions involved
since Pieter's blog post and I can't find any up to date samples that
show security. I checked to zguide, but I didn't see any examples
relating to security. Anyone got an up date to example?

Many thanks,
Rob



On Mon, Jul 20, 2015, at 07:56 PM, Arnaud Kapp wrote:
> Hello,
> 
> Welcome to the list.
> 
> What version of ZeroMQ (libzmq) are you using? If you're running on a
> fairly recent libzmq the crypto API should be available -- provided
> that you built libzmq with libsodium support.
> 
> I am not familiar with clrzmq4, but yes I believe it shouldn't be *too*
> hard.
> Enabling encryption is simply setting a few options on your sockets.
> However, authentication is done through the ZAP
> (http://rfc.zeromq.org/spec:27).
> So you'd have to implement a ZAP handler (this is fairly easy) that would
> validates the authentication. Unless clrzmq4 were implementing one
> and providing abstraction on top of this handler.
> 
> 
> On Mon, Jul 20, 2015 at 5:14 PM, Robert Pickering
> <robertfpickering at fastmail.com> wrote:
> > Hi all,
> >
> > I'm new to this list so sorry if I'm breaking some protocol that I don't
> > know about :) I've done some googling about this topic, but info is a
> > bit unclear to me, so I thought I write to list for clarification.
> >
> > Currently using zmq to provide sub/pub messaging in our C# application.
> > This is all working nicely, but I'd like to add authentication and
> > encryption and it seems the APIs to do this are not yet exposed to C#.
> >
> > From what I've read there's two implementation of zmq security, one in
> > the native c++ zmq repo [1], if it's possible to use the latest version
> > of zmq (as we do), then you should use this one. There also exists a
> > reference implementation outside of the main repo, for people can't use
> > the latest version zmq. It's available here [2].
> >
> > From what I've read in Pieter Hintjens's blog [3], the interface to the
> > security apis doesn't look too complicated, so if I were to folk and the
> > C# wrapper [4] and add the missing api calls it should be reasonable
> > straight forward. Has anyone tried this before? Is there some pitfall
> > that I missing that would make this a trick task?
> >
> > Kind regards,
> > Robert
> >
> > [1] https://github.com/zeromq/libzmq
> > [2] https://github.com/zeromq/libcurve
> > [3] http://hintjens.com/blog:49
> > [4] https://github.com/zeromq/clrzmq4
> > _______________________________________________
> > zeromq-dev mailing list
> > zeromq-dev at lists.zeromq.org
> > http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> 
> 
> 
> -- 
> Kapp Arnaud - Xaqq
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev