[zeromq-dev] Zmq Security for the C# wrapper
Robert Pickering
robertfpickering at fastmail.com
Tue Jul 21 13:10:18 CEST 2015
Yes, you're right, I don't think there's been significant renaming, I
think I'm getting confused between the names used in the C++ libzmq and
the names used in the blog post which are the high-level C binding czmq.
Now I understand this, it makes the job easier. For example to apply a
certificate to a socket I just need to find out what zcert_apply and
zsocket_set_curve_server do and expose the equivalent from in the C#
api.
Thanks,
Rob
On Tue, Jul 21, 2015, at 12:45 PM, Pieter Hintjens wrote:
> There are some examples in czmq/examples/security. I don't think there
> have been significant changes since my blog articles.
>
> On Tue, Jul 21, 2015 at 12:01 PM, Robert Pickering
> <robertfpickering at fastmail.com> wrote:
> > Hello again,
> >
> > Thanks for the advice Arnaud. I'm taking a look this morning it does
> > look reasonable straight forward to expose the security api, in fact
> > some of the work has already been started in clrzmq4, but looks like not
> > everything is there yet. One thing that's hindering me is that there
> > seems to have been quite a bit of renaming to the functions involved
> > since Pieter's blog post and I can't find any up to date samples that
> > show security. I checked to zguide, but I didn't see any examples
> > relating to security. Anyone got an up date to example?
> >
> > Many thanks,
> > Rob
> >
> >
> >
> > On Mon, Jul 20, 2015, at 07:56 PM, Arnaud Kapp wrote:
> >> Hello,
> >>
> >> Welcome to the list.
> >>
> >> What version of ZeroMQ (libzmq) are you using? If you're running on a
> >> fairly recent libzmq the crypto API should be available -- provided
> >> that you built libzmq with libsodium support.
> >>
> >> I am not familiar with clrzmq4, but yes I believe it shouldn't be *too*
> >> hard.
> >> Enabling encryption is simply setting a few options on your sockets.
> >> However, authentication is done through the ZAP
> >> (http://rfc.zeromq.org/spec:27).
> >> So you'd have to implement a ZAP handler (this is fairly easy) that would
> >> validates the authentication. Unless clrzmq4 were implementing one
> >> and providing abstraction on top of this handler.
> >>
> >>
> >> On Mon, Jul 20, 2015 at 5:14 PM, Robert Pickering
> >> <robertfpickering at fastmail.com> wrote:
> >> > Hi all,
> >> >
> >> > I'm new to this list so sorry if I'm breaking some protocol that I don't
> >> > know about :) I've done some googling about this topic, but info is a
> >> > bit unclear to me, so I thought I write to list for clarification.
> >> >
> >> > Currently using zmq to provide sub/pub messaging in our C# application.
> >> > This is all working nicely, but I'd like to add authentication and
> >> > encryption and it seems the APIs to do this are not yet exposed to C#.
> >> >
> >> > From what I've read there's two implementation of zmq security, one in
> >> > the native c++ zmq repo [1], if it's possible to use the latest version
> >> > of zmq (as we do), then you should use this one. There also exists a
> >> > reference implementation outside of the main repo, for people can't use
> >> > the latest version zmq. It's available here [2].
> >> >
> >> > From what I've read in Pieter Hintjens's blog [3], the interface to the
> >> > security apis doesn't look too complicated, so if I were to folk and the
> >> > C# wrapper [4] and add the missing api calls it should be reasonable
> >> > straight forward. Has anyone tried this before? Is there some pitfall
> >> > that I missing that would make this a trick task?
> >> >
> >> > Kind regards,
> >> > Robert
> >> >
> >> > [1] https://github.com/zeromq/libzmq
> >> > [2] https://github.com/zeromq/libcurve
> >> > [3] http://hintjens.com/blog:49
> >> > [4] https://github.com/zeromq/clrzmq4
> >> > _______________________________________________
> >> > zeromq-dev mailing list
> >> > zeromq-dev at lists.zeromq.org
> >> > http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> >>
> >>
> >>
> >> --
> >> Kapp Arnaud - Xaqq
> >> _______________________________________________
> >> zeromq-dev mailing list
> >> zeromq-dev at lists.zeromq.org
> >> http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> > _______________________________________________
> > zeromq-dev mailing list
> > zeromq-dev at lists.zeromq.org
> > http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev
More information about the zeromq-dev
mailing list