[HECnet] Intermittent Connection with PyDECnet?

[Paul Koning]

> On Mar 2, 2020, at 1:05 PM, Mark J. Blair <nf6x at nf6x.net> wrote:
> 
> 
> 
>> On Mar 2, 2020, at 9:45 AM, Paul Koning <paulkoning at comcast.net> wrote:
>> 
>> It's not there currently.  SSL would be easy to do in PyDECnet given the SSL library that exists in Python.  SSH tunnel not quite so much.  Would SSL be sufficient? 
> 
> I would think that SSL would be fine for the link security. Would that also provide a mechanism for the caller to authenticate themself to the upstream link?

The Python SSL library has a pile of support for certificates (in both directions, as far as I can tell, so mutual authentication is possible).  Also ways to query the certificates used.  This is stuff I haven't used before so it will take some study to understand it.

	paul