D01-BP: Yes
Rationale
HDTN provides a documented Linux userspace endpoint path: bpgen-async and bpsink-async run directly from the build directory with configured BPSec files. TCPCLv4 uses Boost.Asio TCP sockets; the published TLS configuration binds port 4556 and loads PEM credentials from configured files. With high-numbered ports, user-owned credentials/storage and preconfigured host networking, routine operation requires no raw socket or elevated networking capability. Package installation and host provisioning are separate privileged steps.
Assessment method
Documentary classification; no new build or runtime experiment
Source context
Versioned primary-source review, 2026-10-15
Outstanding qualification
Documentary execution-requirement finding, not a fresh unprivileged runtime test. Replace example Windows certificate paths with readable Linux paths; provision participant trust, TLS and BPSec policies for the selected profile. The sample runscript itself uses non-TLS configuration and is not an end-to-end secure-profile test. No transfer of the separate ION F16/F21 witnesses or CGR/LTP qualification is inferred.
Public sources
- https://github.com/nasa/HDTN/blob/7fbe90cdbe3c8c737efaacb5985f881f95fc7d2a/runscript.sh
- https://github.com/nasa/HDTN/blob/7fbe90cdbe3c8c737efaacb5985f881f95fc7d2a/README.md
- https://github.com/nasa/HDTN/blob/7fbe90cdbe3c8c737efaacb5985f881f95fc7d2a/common/induct_manager/src/TcpclV4Induct.cpp
- https://github.com/nasa/HDTN/blob/7fbe90cdbe3c8c737efaacb5985f881f95fc7d2a/config_files/hdtn/hdtn_ingress1tcpclv4tls_port4556.json
- https://github.com/nasa/HDTN/blob/7fbe90cdbe3c8c737efaacb5985f881f95fc7d2a/config_files/bpsec/ipn1.1_con_plus_int.json
- https://man7.org/linux/man-pages/man7/ip.7.html