3.5 The TLS Handshake Protocol

The Handshake protocol is responsible for the ciphersuite negotiation, the initial key exchange, and the authentication of the two peers. This is fully controlled by the application layer, thus your program has to set up the required parameters. Available functions to control the handshake protocol include:

gnutls_priority_init:

To initialize a priority set of ciphers.

gnutls_priority_deinit:

To deinitialize a priority set of ciphers.

gnutls_priority_set:

To associate a priority set with a TLS session.

gnutls_priority_set_direct:

To directly associate a session with a given priority string.

gnutls_credentials_set:

To set the appropriate credentials structures.

gnutls_certificate_server_set_request:

To set whether client certificate is required or not.

gnutls_handshake:

To initiate the handshake.