> From: owner-openssl-us...@openssl.org [mailto:owner-openssl-
> us...@openssl.org] On Behalf Of Frederic Nivor
> Sent: Friday, 02 May, 2014 11:18
> To: openssl-users@openssl.org
> Subject: OpenSSL / GnuTLS / Certificate Installation HowTo
> 
> I would like to create a TCP client/server scenario:
> - a simple C server on a VPS
> - a simple C client on another device
> And I would like to secure the TCP connection between them. GnuTLS
> seems to be a good choice (they also propose some client/server
> samples).
> My web hosting provider gave me a SSL certificate. So from now, I
> don't know how to install and configure everything in order to work
> properly:
> - from the SSL certificate installation (if I need to),
> - how to use GnuTLS in my client/server program with those
> certificates (if needed),
> - ...
> Can somebody explain the all thing please ?

OpenSSL and GnuTLS are two completely different software packages. Perhaps you 
should ask this on a GnuTLS list.

(Personally, I wouldn't consider GnuTLS "a good choice" for any task that 
required security, or a decent-quality implementation. Heartbleed was bad, but 
the GnuTLS goto bug of a few weeks back was inexcusable.)

Regardless of what implementation you use, though, I'd suggest picking up a 
copy of Rescorla's /SSL and TLS/ book, or a similar reference. Trying to get a 
crash course in configuring and administering SSL and TLS by email is an 
enterprise fraught with danger and disappointment.

If I understand your requirements, a better approach would probably be a 
generic SSL/TLS tunnel utility like STunnel, or a VPN.

-- 
Michael Wojcik
Technology Specialist, Micro Focus




This message has been scanned for malware by Websense. www.websense.com
:��I"Ϯ��r�m����
(����Z+�K�+����1���x��h����[�z�(����Z+���f�y�������f���h��)z{,���

Reply via email to