Stand alone TLS encryption module?

[Mike Toler]

I’m working with the Tsung tool right now (written in Erlang) to load test a Jabber project.  In the real world, all of the communications to and from the server would be encrypted using TLS, but that isn’t supported by Tsung.

 

Is there a stand alone TLS module (or even one that could be hijacked from another project) that would be fairly simple to integrate into another application?

 

Thanks.

 

Michael Toler

[phone] (Office)

[phone] (mobile)

Systems Integration Engineer

Prodea Systems.

 

This message is confidential to Prodea Systems, Inc unless otherwise indicated 
or apparent from its nature. This message is directed to the intended recipient 
only, who may be readily determined by the sender of this message and its 
contents. If the reader of this message is not the intended recipient, or an 
employee or agent responsible for delivering this message to the intended 
recipient:(a)any dissemination or copying of this message is strictly 
prohibited; and(b)immediately notify the sender by return message and destroy 
any copies of this message in any form(electronic, paper or otherwise) that you 
have.The delivery of this message and its information is neither intended to be 
nor constitutes a disclosure or waiver of any trade secrets, intellectual 
property, attorney work product, or attorney-client communications. The 
authority of the individual sending this message to legally bind Prodea Systems  
is neither apparent nor implied,and must be independently verified.

_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions

[Oscar Hellström-2]

Mike Toler wrote:

> I'm working with the Tsung tool right now (written in Erlang) to load
> test a Jabber project.  In the real world, all of the communications to
> and from the server would be encrypted using TLS, but that isn't
> supported by Tsung.
>
>  
>
> Is there a stand alone TLS module (or even one that could be hijacked
> from another project) that would be fairly simple to integrate into
> another application?
>

The ssl module in the ssl application is used for this.
You only need to hack the way the Tsung plugin connects, and after that,
the interface to the module is the same as to the gen_tcp.

>
> Thanks.
>
>  
>
> Michael Toler
>
> [phone] (Office)
>
> [phone] (mobile)
>
> Systems Integration Engineer
>
> Prodea Systems.
>
>  
>
>
>
>
> This message is confidential to Prodea Systems, Inc unless otherwise indicated
> or apparent from its nature. This message is directed to the intended recipient
> only, who may be readily determined by the sender of this message and its
> contents. If the reader of this message is not the intended recipient, or an
> employee or agent responsible for delivering this message to the intended
> recipient:(a)any dissemination or copying of this message is strictly
> prohibited; and(b)immediately notify the sender by return message and destroy
> any copies of this message in any form(electronic, paper or otherwise) that you
> have.The delivery of this message and its information is neither intended to be
> nor constitutes a disclosure or waiver of any trade secrets, intellectual
> property, attorney work product, or attorney-client communications. The
> authority of the individual sending this message to legally bind Prodea Systems  
> is neither apparent nor implied,and must be independently verified.
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> erlang-questions mailing list
> [hidden email]
> http://www.erlang.org/mailman/listinfo/erlang-questions

Best Regards
--
Oscar Hellström, [hidden email]
Erlang Training and Consulting
http://www.erlang-consulting.com/
_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions

[Chandru-4]

On 10/05/07, Mike Toler <[hidden email]> wrote:
>
> I'm working with the Tsung tool right now (written in Erlang) to load test a
> Jabber project.  In the real world, all of the communications to and from
> the server would be encrypted using TLS, but that isn't supported by Tsung.
>
> Is there a stand alone TLS module (or even one that could be hijacked from
> another project) that would be fairly simple to integrate into another
> application?

Have you tried using stunnel(*) to sit in between Tsung and ejabberd?
That way you don't have to change Tsung at all.

Chandru

* http://stunnel.org
_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions

[Nicolas Niclausse]

Mike Toler ecrivait le 10.05.2007 16:57:
> I’m working with the Tsung tool right now (written in Erlang) to load
> test a Jabber project.  In the real world, all of the communications to
> and from the server would be encrypted using TLS, but that isn’t
> supported by Tsung.

Hello,

Tsung is able to use the ssl module. From the documentation, this module
(since ssl-3.0.6) is able to use tlsv1 :

http://www.erlang.org/doc/doc-5.5.4/lib/ssl-3.1/doc/html/index.html

Did you try it ?

--
Nicolas
_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions

[Mike Toler]

Do you happen to have an SSL test that I can look at to see how the
requests and such progress through the Tsung code?

Michael

-----Original Message-----
From: Nicolas Niclausse [mailto:[hidden email]]
Sent: Friday, May 11, 2007 4:10 AM
To: Mike Toler
Cc: [hidden email]
Subject: Re: [erlang-questions] Stand alone TLS encryption module?

Mike Toler ecrivait le 10.05.2007 16:57:
> I'm working with the Tsung tool right now (written in Erlang) to load
> test a Jabber project.  In the real world, all of the communications
to
> and from the server would be encrypted using TLS, but that isn't
> supported by Tsung.

Hello,

Tsung is able to use the ssl module. From the documentation, this module
(since ssl-3.0.6) is able to use tlsv1 :

http://www.erlang.org/doc/doc-5.5.4/lib/ssl-3.1/doc/html/index.html

Did you try it ?

--
Nicolas



This message is confidential to Prodea Systems, Inc unless otherwise indicated
or apparent from its nature. This message is directed to the intended recipient
only, who may be readily determined by the sender of this message and its
contents. If the reader of this message is not the intended recipient, or an
employee or agent responsible for delivering this message to the intended
recipient:(a)any dissemination or copying of this message is strictly
prohibited; and(b)immediately notify the sender by return message and destroy
any copies of this message in any form(electronic, paper or otherwise) that you
have.The delivery of this message and its information is neither intended to be
nor constitutes a disclosure or waiver of any trade secrets, intellectual
property, attorney work product, or attorney-client communications. The
authority of the individual sending this message to legally bind Prodea Systems  
is neither apparent nor implied,and must be independently verified.

_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions

[Mike Toler]

Am I must missing the point here?  Does Tsung support TLS right now?

I have not gotten to the point of testing a secure connection yet (that
is suppose to happen in the next couple of weeks), so I've been trying
to research the problem up to now.

Do I just need to specify that the connection is going to be SSL, and
when the server sends the "starttls" XMPP message, the SSL module will
handle it?

(that would be too cool, but it seems like too much to ask for.)

Michael

-----Original Message-----
From: Nicolas Niclausse [mailto:[hidden email]]
Sent: Friday, May 11, 2007 4:10 AM
To: Mike Toler
Cc: [hidden email]
Subject: Re: [erlang-questions] Stand alone TLS encryption module?

Mike Toler ecrivait le 10.05.2007 16:57:
> I'm working with the Tsung tool right now (written in Erlang) to load
> test a Jabber project.  In the real world, all of the communications
to
> and from the server would be encrypted using TLS, but that isn't
> supported by Tsung.

Hello,

Tsung is able to use the ssl module. From the documentation, this module
(since ssl-3.0.6) is able to use tlsv1 :

http://www.erlang.org/doc/doc-5.5.4/lib/ssl-3.1/doc/html/index.html

Did you try it ?

--
Nicolas



This message is confidential to Prodea Systems, Inc unless otherwise indicated
or apparent from its nature. This message is directed to the intended recipient
only, who may be readily determined by the sender of this message and its
contents. If the reader of this message is not the intended recipient, or an
employee or agent responsible for delivering this message to the intended
recipient:(a)any dissemination or copying of this message is strictly
prohibited; and(b)immediately notify the sender by return message and destroy
any copies of this message in any form(electronic, paper or otherwise) that you
have.The delivery of this message and its information is neither intended to be
nor constitutes a disclosure or waiver of any trade secrets, intellectual
property, attorney work product, or attorney-client communications. The
authority of the individual sending this message to legally bind Prodea Systems  
is neither apparent nor implied,and must be independently verified.

_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions

[Swetha]

Hi Michael,
               I have a similar requirement of load testing XMPP+TLS,i have been using Tsung for non-ssl connections have been not able to find a tool which supports TLS.Were you able to find a solution for it ?
If yes could you please share it with me.

Thanks,
Swetha

[Swetha]

Chandru-4 wrote

Have you tried using stunnel(*) to sit in between Tsung and ejabberd?
That way you don't have to change Tsung at all.

Chandru

Hi Chandru,
              Have you been successful with this approach ?Could you please share your findings

Thanks,
Swetha

* http://stunnel.org
_______________________________________________
erlang-questions mailing list
[hidden email]
http://www.erlang.org/mailman/listinfo/erlang-questions