"Destination unreachable" tells you that you're not running a server or it's 
blocked by a firewall.
Hi, Robin!

Have you updated your OpenSSL installation? Ubuntu 10.04 comes with an old 
0.9.8 release in which the DTLS implementation is entirely broken. You need to 
update OpenSSL to at least 1.0.0a. Make sure that you either overwrite your 
base installation or use appropriate paths when compiling. A "./configure && 
make && make install" installs to /usr/local which is ignored because you 
already have an installation in /usr by default. So either configure OpenSSL 
with --prefix=/usr to overwrite your default installation or compile your 
client and server with -L and -I to the lib and include paths where you 
installed the newer OpenSSL, e.g. "-L/usr/local/lib -I/usr/local/include".


I have Openssl 1.0.0.c with the latest patches and updates for DTLS. As far as 
I know, both server and client are compiled succesfully. I used wireshark 
again, and this time a simple udp server (no encryption), listening on port 
23232. The server received the encrypted datagrams from the DTLS client, so I 
guess that port 23232 is not blocked.
Then I tried to see wether the server is really started and listening, using 
netstat:

~# netstat -nap
...
udp6       0      0 :::23232                :::*                                
15209/dtls_udp_echo
...

so is this meaning that the server would listen only for IPv6 addresses? I use 
only IPv4. If it is so, is there any way that I could add an argument so that 
the server listens on udp(without 6 at the end)?

Thank you and best regards!
Sebastian



      

Reply via email to