diff options
| author | Anders Svensson <[email protected]> | 2011-10-10 11:13:58 +0200 |
|---|---|---|
| committer | Anders Svensson <[email protected]> | 2011-10-10 11:13:58 +0200 |
| commit | eb9656c94f4e92c2a4875dc628cb41d283dd4d2b (patch) | |
| tree | 998adcdcf2386125e34c5d7bd389f43772f31c7b /lib/diameter/doc/src/diameter_soc.xml | |
| parent | cf1de23f71d22c1b9d9502882136b320a087d7e3 (diff) | |
| parent | 942e68d3f93ce686a16d27716892e7c0d2e5872b (diff) | |
| download | otp-eb9656c94f4e92c2a4875dc628cb41d283dd4d2b.tar.gz otp-eb9656c94f4e92c2a4875dc628cb41d283dd4d2b.tar.bz2 otp-eb9656c94f4e92c2a4875dc628cb41d283dd4d2b.zip | |
Merge branch 'anders/diameter/tls_over_tcp/OTP-9605'
* anders/diameter/tls_over_tcp/OTP-9605:
Move init/end_per_suite into testcases
Skip tls testsuite if there's no openssl
Clarify that ssl must be started for TLS support
Add tls support at connection establishment
Add tls testsuite
Documentation updates
Close transport if tls is requested over sctp
Handle tls notification for tcp
Lift recursion in tcp message reception up the call chain
Add tls support to capabilities exchange
Diffstat (limited to 'lib/diameter/doc/src/diameter_soc.xml')
| -rw-r--r-- | lib/diameter/doc/src/diameter_soc.xml | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/lib/diameter/doc/src/diameter_soc.xml b/lib/diameter/doc/src/diameter_soc.xml index 4f8581a904..6b9ef9f756 100644 --- a/lib/diameter/doc/src/diameter_soc.xml +++ b/lib/diameter/doc/src/diameter_soc.xml @@ -57,9 +57,13 @@ including the P Flag in the AVP header.</p> <item> <p> -There is no TLS support. -It's unclear (aka uninvestigated) how TLS would impact -diameter but IPsec can be used without it needing to know.</p> +There is no TLS support over SCTP. +RFC 3588 requires that a Diameter server support TLS but in +practise this seems to mean TLS over SCTP since there are limitations +with running over SCTP: see RFC 6083 (DTLS over SCTP), which is a +response to RFC 3436 (TLS over SCTP). +The current RFC 3588 draft acknowledges this by equating +TLS with TLS/TCP and DTLS/SCTP but we do not yet support DTLS.</p> </item> <item> |