Re:Totally Isolated TLS Unwrapping Server
by reader_1000 on Monday November 23, 2015 @02:33PM
(#10616710)
Is there a roadmap to reach 1.0 release? I wondered because of this statement in your web site: "it has not yet undergone serious testing or performance optimization. Additionally, we may make backwards-incompatible changes to the behavior before titus reaches version 1.0"
Re:Totally Isolated TLS Unwrapping Server
by aristus on Monday November 23, 2015 @11:38AM
(#10615484)
This looks great. Any tips on how to terminate mixed-mode protocols like MySQL's SSL mode and IMAP's STARTTLS? Vanilla unwrapper daemons generally don't handle the case of initial unencrypted bit twiddling, and then SSL negotiation.
Unfortunately not. STARTTLS is the bane of standalone TLS terminators like titus, which is one of the reasons I really dislike STARTTLS. I won't rule out titus supporting STARTTLS some day, but the idea of integrating parsers for a bunch of different protocols into titus is really unappealing.
That said, 0.3 will be released any day now. It's pending testing of the new FreeBSD support.