[jdev] Re: jdev Digest, Vol 10, Issue 3

[Justin Karneges]

On Thursday 04 November 2004 09:23 pm, Kamran Zafar wrote:
> Step 5: Server informs client that it is allowed to
> proceed:
> <proceed xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
>
> Step 6: Client and server attempt to complete TLS
> negotiation over the existing TCP connection.
>
> Step 7: If TLS negotiation is successful, client
> initiates a new stream to server:
>
> I want to know what exactly happens in the "TLS
> negotiation" (implementation point of view). What I
> have to do (other than making and send/receiving of
> TLS related stanzas) in my client and server
> application in "step 6"?

TLS is a binary protocol, and the negotiation is an exchange of packets 
between the client and server to trade public keys and decide on security 
parameters.  This negotiation, as well as the rest of the TLS protocol, is 
covered in RFC 2246.
  http://www.faqs.org/rfcs/rfc2246.html

However, most everyone just uses a library for this, such as OpenSSL.

-Justin