blob: 66445c23fa99e9dae2483ab0f830a3180e9174dc [file] [log] [blame]
Paul Bakker37ca75d2011-01-06 12:28:03 +00001/**
2 * @file
3 * SSL/TLS communication module documentation file.
4 */
5
6/**
7 * @addtogroup ssltls_communication_module SSL/TLS communication module
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +02008 *
Paul Bakker37ca75d2011-01-06 12:28:03 +00009 * The SSL/TLS communication module provides the means to create an SSL/TLS
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020010 * communication channel.
11 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000012 * The basic provisions are:
Manuel Pégourié-Gonnard151dc772015-05-14 13:55:51 +020013 * - initialise an SSL/TLS context (see \c mbedtls_ssl_init()).
14 * - perform an SSL/TLS handshake (see \c mbedtls_ssl_handshake()).
15 * - read/write (see \c mbedtls_ssl_read() and \c mbedtls_ssl_write()).
16 * - notify a peer that connection is being closed (see \c mbedtls_ssl_close_notify()).
Paul Bakker37ca75d2011-01-06 12:28:03 +000017 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000018 * Many aspects of such a channel are set through parameters and callback
19 * functions:
20 * - the endpoint role: client or server.
21 * - the authentication mode. Should verification take place.
22 * - the Host-to-host communication channel. A TCP/IP module is provided.
23 * - the random number generator (RNG).
24 * - the ciphers to use for encryption/decryption.
25 * - session control functions.
26 * - X.509 parameters for certificate-handling and key exchange.
Paul Bakker37ca75d2011-01-06 12:28:03 +000027 *
28 * This module can be used to create an SSL/TLS server and client and to provide a basic
29 * framework to setup and communicate through an SSL/TLS communication channel.\n
30 * Note that you need to provide for several aspects yourself as mentioned above.
31 */