Re: How is the progress to support DTLS

2018-02-10 Thread scoulibaly
Hi Maxim, Tested the NginxPlus patch for DTLS. UDP healthchecking doesn't work (ptoxy_timeout 1s, proxy_responses:1, my server answers every single request right away). Reproducible with Californium Scandium demos. Sekine Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278434,278480#ms

Re: How is the progress to support DTLS

2018-02-10 Thread scoulibaly
Ted, A patched version of NginxPlus is available on request from Nginx customer care (based on 1.18.0). AFAIK the DTLS feature is expected to be deployed in either next or the other one release. Sekine Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278434,278479#msg-278479 ___

Re: How is the progress to support DTLS

2018-02-10 Thread scoulibaly
Ted, I had similar issue recently and found out that the NGINX patch for DTLS doesn't seem to support PSK. Depending on the client cipher negociation at handshake time you might or might not encounter "no shared cipher". If you can, you should force your client to use an "SSL" cipher supported by