aboutsummaryrefslogtreecommitdiff
path: root/docs/BUILD_TLS.adoc
diff options
context:
space:
mode:
authorGarrett D'Amore <garrett@damore.org>2018-06-08 09:44:04 -0700
committerGarrett D'Amore <garrett@damore.org>2018-06-08 09:44:04 -0700
commit5bcbf877b74fc02f1ed596521cc57e112d259bcd (patch)
tree293987842c7122c510bf09ca2d1edb2a44263e29 /docs/BUILD_TLS.adoc
parent79dea9caa32faec3b8075e1457c9e1276032a93c (diff)
downloadnng-5bcbf877b74fc02f1ed596521cc57e112d259bcd.tar.gz
nng-5bcbf877b74fc02f1ed596521cc57e112d259bcd.tar.bz2
nng-5bcbf877b74fc02f1ed596521cc57e112d259bcd.zip
fixes #512 ZeroTier can use master branch of ZeroTierOne now
Diffstat (limited to 'docs/BUILD_TLS.adoc')
-rw-r--r--docs/BUILD_TLS.adoc56
1 files changed, 56 insertions, 0 deletions
diff --git a/docs/BUILD_TLS.adoc b/docs/BUILD_TLS.adoc
new file mode 100644
index 00000000..242e7f44
--- /dev/null
+++ b/docs/BUILD_TLS.adoc
@@ -0,0 +1,56 @@
+= Building for TLSv1.2 Support
+
+If you want to include support for Transport Layer Security
+(tls+tcp:// and wss:// URLs) you should follow these directions.
+
+At this time, TLS support depends on the mbedTLS library.
+See https://tls.mbed.org/ for details.
+
+IMPORTANT: mbedTLS is licensed under different terms than NNG.
+You are responsible for reading those license terms, and ensuring
+that your use conforms to them.
+
+On many distributions you may be able to install a pre-packaged version
+of mbedTLS. We recommend doing so if this is an option for you.
+For example, Ubuntu users can install the `libmbedtls-dev` package.
+
+You can also build mbedTLS from source; if you choose to do so,
+please make sure you also *install* it somewhere (even a temporary
+staging directory).
+
+== Configuring NNG with mbedTLS
+
+TLS support is not enabled by default, but can be enabled by configuring
+with the CMake option `NNG_ENABLE_TLS=ON`.
+
+By default NNG searches for an installed copy of mbedTLS in `/usr/local`,
+as well as the normal installation directories for libraries on your system.
+
+If you have installed mbedTLS elsewhere, you can direct the NNG configuration
+to it by setting the `MBEDTLS_ROOT_DIR` CMake variable.
+
+== Example
+
+The following example would work on either Linux or macOS, and assumes
+that we have checked out github source trees into `$HOME/work`.
+It also assumes that mbedTLS is already installed in /usr/local or
+a standard search path.
+
+[source, sh]
+----
+$ export NNGDIR=$HOME/work/nng
+$ mkdir build
+$ cd build
+
+$ cmake -DNNG_ENABLE_TLS=ON ..
+
+ ... (lots of lines of output from cmake...)
+
+$ make
+
+ ... (lots of lines of output from make...)
+
+$ ./tests/tls
+ok ./tests/tls 1.503s
+
+----