[Nice] DTLS support with libnice

Olivier Crête olivier.crete at collabora.com
Tue Aug 20 10:37:00 PDT 2013

On Tue, 2013-08-20 at 07:35 +0000, Rajarshi Chaudhuri wrote:
> So my question - is  there a way to access the UDP sockets used by
> libnice so that we could set up DTLS [using open-ssl]. Note that, once
> DTLS handshake is completed, though the actual data is not sent as
> DTLS records with SRTP, the data may still need to be sent using
> SSL_write() - see http://tools.ietf.org/html/rfc5764#section-5.1.1.
> Also on receiving, as described in section 5.1.2 of the same RFC, we
> need to handle SRTP and DTLS messages, and the latter needs to be
> handled by open-ssl. 
> Is there other ways of supporting DTLS in libnice directly?

The way DTLS should be done over libnice is to have a socket abstraction
layer and them implement DTLS on top of that. I've done such an
implementation in GLib [1][2][3], but it was not merged due to some very
real concerns, I haven't had time to re-do it better, but hopefully we
can get it done in the near future.

So depending on what your timeline is you can either wait for us to do
it or do something similar.

[1] https://bugzilla.gnome.org/show_bug.cgi?id=697907
[2] https://bugzilla.gnome.org/show_bug.cgi?id=697908
[3] https://bugzilla.gnome.org/show_bug.cgi?id=697909

Olivier Crête
olivier.crete at collabora.com

More information about the nice mailing list