---

Secure Transport

Secure Transport is Apple’s implementation of SSL and TLS, used to create secure connections over TCP/IP connections such as the Internet (see “Secure Communication”). You can use the Secure Transport API to set parameters for a secure session, open and maintain a session, and close a session. Functions provided by Secure Transport allow you to:

• Set which SSL/TLS protocol versions are allowed

• Specify which cipher suites should be enabled for a session

• Specify whether client-side authentication should be required

• Specify certificates to be used for the session

• Specify whether expired certificates are allowed

• Specify trusted root certificates for the session

• Specify whether unknown or expired root certificates are allowed

• Specify Diffie-Hellman parameters

• Specify the domain name of the other end of the connection

• Set up and open an SSL or TLS session

• Determine which SSL/TLS protocol was negotiated for the session

• Determine which cipher suite was negotiated for the session

• Obtain the current ID data of the other end of the connection

• Read and write data in a session

• Terminate the session

To get started with Secure Transport, see Secure Transport Reference. For sample code, see SSLSample.

---