[JDEV] S2S authentication and encryption using OpenSSL's TLS [was: s2s S SL] (fixed typo)

[Steve Wilhelm]

Bray, Dan wrote:
> I need server to server SSL.  
>
>I'd like to work on this and would appreciate some help narrowing down the
>code I need to look at. Where do I start to look?  mio? dialback?  At what
>level are the s2s connections managed?

I have a similar but slightly different requirements:

1. I would like to set up two Jabber servers: one in running company A's
LAN, one running in company B's LAN. 

2. Both companies want to use Jabber.com's JIM client.

3. Company A and B want to connect to each others Jabber server using the
Internet, but they want to authenticate each other's server using X.509
certificates.

4. Both companies want the communication between their respective Jabber
servers to be encrypted using OpenSSL's TLS protocol.

5. Both companies want to use an unmodified Jabber.com JIM client. 

Note that both A and B are not (yet) concerned about client to server
authentication or security, just server to server.

Any advice on providing S2S authentication and encryption using OpenSSL
would be appreciated.

Steve Wilhelm
Technology Strategy, Office of the CTO, Reuters Ltd.
Jabber Id: SteveWilhelm at jabber.com