DTLSServer

Inherits: Reference < Object Helper class to implement a DTLS server.

Description

setup it converts connected PacketPeerUDP to PacketPeerDTLS accepting them via take_connection as DTLS clients. Under the hood, this class is used to store the DTLS state and cookies of the server. The reason of why the state and cookies are needed is outside of the scope of this documentation. Below a small example of how to use it:

  1. # server.gdextends Nodevar dtls := DTLSServer.new()var server := UDPServer.new()var peers = []func _ready():    server.listen(4242)    var key = load("key.key") # Your private key.    var cert = load("cert.crt") # Your X509 certificate.    dtls.setup(key, cert)func _process(delta):    while server.is_connection_available():        var peer : PacketPeerUDP = server.take_connection()        var dtls_peer : PacketPeerDTLS = dtls.take_connection(peer)        if dtls_peer.get_status() != PacketPeerDTLS.STATUS_HANDSHAKING:            continue # It is normal that 50% of the connections fails due to cookie exchange.        print("Peer connected!")        peers.append(dtls_peer)    for p in peers:        p.poll() # Must poll to update the state.        if p.get_status() == PacketPeerDTLS.STATUS_CONNECTED:            while p.get_available_packet_count() > 0:                print("Received message from client: %s" % p.get_packet().get_string_from_utf8())                p.put_packet("Hello DTLS client".to_utf8())
  1. # client.gdextends Nodevar dtls := PacketPeerDTLS.new()var udp := PacketPeerUDP.new()var connected = falsefunc _ready():    udp.connect_to_host("127.0.0.1", 4242)    dtls.connect_to_peer(udp, false) # Use true in production for certificate validation!func _process(delta):    dtls.poll()    if dtls.get_status() == PacketPeerDTLS.STATUS_CONNECTED:        if !connected:            # Try to contact server            dtls.put_packet("The answer is... 42!".to_utf8())        while dtls.get_available_packet_count() > 0:            print("Connected: %s" % dtls.get_packet().get_string_from_utf8())            connected = true

Methods

Method Descriptions

  • Error setup ( CryptoKey key, X509Certificate certificate, X509Certificate chain=null ) private_key and provide the given certificate to clients. You can pass the optional chain parameter to provide additional CA chain information along with the certificate.
  • PacketPeerDTLS take_connection ( PacketPeerUDP udp_peer ) udp_peer which must be already connected (see PacketPeerUDP.connect_to_host). Note: You must check that the state of the return PacketPeerUDP is PacketPeerDTLS.STATUS_HANDSHAKING, as it is normal that 50% of the new connections will be invalid due to cookie exchange.