Discussion:
advice on Guardian openssl tls c++
(too old to reply)
Luis Silva
2020-11-03 18:11:18 UTC
Permalink
Hi,

Currently I have a tacl-guardian C program that receives tcp requests (sockets) from a non tandem source. This is working fine.

Now I need to change my app to use TLS.

Currently i'm reading "HP NonStop SSL Reference Manual" where i can start a NonStop SSL Process. But I don't think this will work for me? Am I right?

My question is, can I use openssl headers like #include <openssl/ssl.h> to upgrade my app. Do this headers live in tacl? Or do I need to use something else?

If the do I assume they have the same treatment as in gcc so to speak.

Thank for your advices.

Happy conding
Randall
2020-11-03 18:45:33 UTC
Permalink
Post by Luis Silva
Hi,
Currently I have a tacl-guardian C program that receives tcp requests (sockets) from a non tandem source. This is working fine.
Now I need to change my app to use TLS.
Currently i'm reading "HP NonStop SSL Reference Manual" where i can start a NonStop SSL Process. But I don't think this will work for me? Am I right?
My question is, can I use openssl headers like #include <openssl/ssl.h> to upgrade my app. Do this headers live in tacl? Or do I need to use something else?
If the do I assume they have the same treatment as in gcc so to speak.
Thank for your advices.
Happy conding
You can set up a NonStop SSL PROXYC process. It will take loopback TCP requests and forward them to a specific TLS address.
Luis Silva
2020-11-03 19:49:28 UTC
Permalink
Post by Randall
Post by Luis Silva
Hi,
Currently I have a tacl-guardian C program that receives tcp requests (sockets) from a non tandem source. This is working fine.
Now I need to change my app to use TLS.
Currently i'm reading "HP NonStop SSL Reference Manual" where i can start a NonStop SSL Process. But I don't think this will work for me? Am I right?
My question is, can I use openssl headers like #include <openssl/ssl.h> to upgrade my app. Do this headers live in tacl? Or do I need to use something else?
If the do I assume they have the same treatment as in gcc so to speak.
Thank for your advices.
Happy conding
You can set up a NonStop SSL PROXYC process. It will take loopback TCP requests and forward them to a specific TLS address.
Thank you Randall, your advice is always wise.

I am the one receiving incoming requests is it PROXYC or PROXYS?

With this approach the remote linux server can connect to my app via ssl/tls right?

I guess I can open as many SSL/TLS ports as I need right?
Randall
2020-11-04 19:45:28 UTC
Permalink
Post by Luis Silva
Post by Randall
Post by Luis Silva
Hi,
Currently I have a tacl-guardian C program that receives tcp requests (sockets) from a non tandem source. This is working fine.
Now I need to change my app to use TLS.
Currently i'm reading "HP NonStop SSL Reference Manual" where i can start a NonStop SSL Process. But I don't think this will work for me? Am I right?
My question is, can I use openssl headers like #include <openssl/ssl.h> to upgrade my app. Do this headers live in tacl? Or do I need to use something else?
If the do I assume they have the same treatment as in gcc so to speak.
Thank for your advices.
Happy conding
You can set up a NonStop SSL PROXYC process. It will take loopback TCP requests and forward them to a specific TLS address.
Thank you Randall, your advice is always wise.
I am the one receiving incoming requests is it PROXYC or PROXYS?
With this approach the remote linux server can connect to my app via ssl/tls right?
I guess I can open as many SSL/TLS ports as I need right?
The NonStop SSL manual would be best for that. Probably PROXYS.

Loading...