[gnutls-help] Disable anti-replay protection in DTLS ?

Sebastien Decugis sdecugis at freediameter.net
Fri Jun 7 12:09:30 CEST 2013


Hello,

I am looking at implementing DTLS over SCTP (as per RFC 6083) in my application, and I noticed that one of the requirements is to disable the anti-replay protection, as the higher layer expects reliable delivery above SCTP link. Could you tell me if this can be done with GNUTLS ? I was not able to find any information in gnutls manual about this feature.

I also noticed that the retransmissions must be disabled for the handshake protocol, I think this can be done with gnutls_heartbeat_set_timeouts by setting a retrains_timeout greater than the total_timeout; can you confirm?

Thank you in advance!

Best regards,
Sebastien.










More information about the Gnutls-help mailing list