hessu/aprsc — pull request #25 by kd7lxl (2014-01-22 00:44:40+00:00)
Title: ssl: Allow NULL encryption cipher (authentication only).

Typically SSL is used to encrypt messages, but in aprsc the purpose of SSL is to authenticate amateur radio operators. We don't need encryption to perform this authentication. Further, amateur radio operators connecting via amateur radio network are not allowed to encrypt their messages. This patch allows aprsc to accept SSL connections without encryption, using SSL only for secure authentication.

I tested by sending Xastir connections through stunnel to aprsc. When stunnel default ciphers are used, it negotiates AES256-SHA. When setting stunnel `ciphers = eNULL`, it negotiates NULL-SHA. Analyzing a packet capture confirmed that the contents of the APRS packet were sent in clear text after an authentication header.