A *very* rough alpha version of my SSL stuff is (hopefully :))
ready for some form of public consumption.  It's currently available
just from my server; once it's been poked and proded over a bit more
I'll put it on CPAN. 


http://phydeaux.org/perl/POE-Wheel-SSLSocketFactory-0.01_03.tar.gz


        It has been rumored to run on Linux (RH 6.2 and 7.1), FreeBSD
(probably 4.3), and Solaris (2.7; with some problems connecting with
testclient from Linux to testserver on Solaris).  Your milage may of
course vary. :) There's both an echo server and an echo client which
interoperate with at least openssl's s_client and s_server.


        The `README' file is included below.


POE::Wheel::SSLSocketFactory
------------------------------

This is an *ALPHA* release of a POE wheel for creating SSL sockets.
It's very short on documentation, and (currently) only implements
listening sockets.

It depends on POE (duh), the Net::SSLeay module (available from CPAN),
and OpenSSL (http://www.openssl.org/).


Trying it out
------------------------------

The `eg/testserver.plx' program shows how to create an SSL enabled
server of limited means.  

It requires a server certificate and an RSA key pair, which can be
generated with the included `make_keys' script.  Keep in mind that
this is a self-signed certificate (for more permanent usage you might
want to use a commercial certificate authority or generate your own
CA; see the openssl documentation for more details).

After you've gotten your key and certificate made, you can start the
server with `perl eg/testserver.plx' (the blib module is used so it's
not necessary to have done a `make install' first).  If all goes well,
you should see some output like follows:


        ## main::start
        Adding key ./plain-rsa.pem and cert ./plain-cert.pem
        calling define ssl accept state
        ## entering POE main loop


The server's now up and listening on port 7777.  You can use the
openssl s_client utility to connect:


        openssl s_client -connect yourhost:7777 -quiet


You should (after openssl griping about the self-signed cert) be able
to type, and the server will echo the same back prefixed by a
timestamp.  Enter `exit' (or C-c) to close the connection (the
`-quiet' option makes openssl ignore EOF).  Control-C will also stop
the server.

The other option is to use the `eg/testclient.plx' program.  It will
default to connecing to `localhost:7777' (specify a hostname to
connect to hostname:7777, or host:port to specify another port).

$Id: README,v 1.2 2001/08/05 20:46:56 fletch Exp $



-- 
Fletch                | "If you find my answers frightening,       __`'/|
[EMAIL PROTECTED]   |  Vincent, you should cease askin'          \ o.O'
770 933-0600 x211(w)  |  scary questions." -- Jules                =(___)=
                      |                                               U

Reply via email to