Re: [PLUG] secure tcp/ip communication

[Stephen Brown <steve@dataclarity.net>]

If you are writing the all the apps, don't forget OpenSSL - more of a s
learning curve than drop in tunnels, but you can integrate tightly with
the application and doe encryption and authorization through SSL/TLS.
And because it is in the app, you don't need to set up the tunnel on
all the boxes in the network. You will only need to manage the
certificates
if you are using SSL for auth.

> I will soon be writing a few applications that will need to make use of
> tcp/ip (using the sockets API). However, because the project involves remote
> administration and access privelages, it is important that I use a secure
> connection, so that passwords or other information can't be sniffed.
> 
> Does anyone have any experience using encrypted tcp/ip tunnels? Should I
> just encrypt the data I will be sending using send() and decrypt it after it
> is received by recv()? I looked on fm.net and found a library called
> libmcrypt. I have not yet looked at its documentation. Also a quick search
> with apt-cache gives me packages like tunnelv, stunnel, and sslwrap? Has
> anyone on this list used any of these tools?

-- 
Stephen Brown           Data Clarity, Inc.
steve@dataclarity.net   1-877-496-3527   fax: 801-382-1525


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug