tls_connect, tls_connect_fds, tls_connect_servername, tls_connect_socket, tls_connect_cbs — instruct a
Contents
Description
After creating a TLS client context with tls_client(3) and configuring it with tls_configure(3), a client
connection is initiated by calling tls_connect(). This function will create a new socket, connect to the
specified host and port, and then establish a secure connection. The port may be numeric or a service
name. If it is NULL, then a host of the format "hostname:port" is permitted. The name to use for
verification is inferred from the host value.
The tls_connect_servername() function has the same behaviour, however the name to use for verification is
explicitly provided, for the case where the TLS server name differs from the DNS name.
An already existing socket can be upgraded to a secure connection by calling tls_connect_socket().
Alternatively, a secure connection can be established over a pair of existing file descriptors by calling
tls_connect_fds().
Calling tls_connect_cbs() allows read and write callback functions to handle data transfers. The
specified cb_arg parameter is passed back to the functions, and can contain a pointer to any caller-
specified data.
History
tls_connect() and tls_connect_socket() appeared in OpenBSD 5.6 and got their final names in OpenBSD 5.7.
tls_connect_fds() and tls_connect_servername() appeared in OpenBSD 5.7 and tls_connect_cbs() in
OpenBSD 6.1.
Name
tls_connect, tls_connect_fds, tls_connect_servername, tls_connect_socket, tls_connect_cbs — instruct a
TLS client to establish a connection
Return Values
These functions return 0 on success or -1 on error.
See Also
tls_accept_socket(3), tls_client(3), tls_close(3), tls_config_ocsp_require_stapling(3), tls_configure(3), tls_handshake(3), tls_init(3)
Synopsis
#include<tls.h>inttls_connect(structtls*ctx, constchar*host, constchar*port);
inttls_connect_fds(structtls*ctx, intfd_read, intfd_write, constchar*servername);
inttls_connect_servername(structtls*ctx, constchar*host, constchar*port, constchar*servername);
inttls_connect_socket(structtls*ctx, ints, constchar*servername);
inttls_connect_cbs(structtls*ctx,
ssize_t(*tls_read_cb)(structtls*ctx,void*buf,size_tbuflen,void*cb_arg),
ssize_t(*tls_write_cb)(structtls*ctx,constvoid*buf,size_tbuflen,void*cb_arg), void*cb_arg,
constchar*servername);
