A TLS connection is represented as a struct tls object called a “context”. A new context is created by either the () or () functions. () is used in TLS client programs, () in TLS server programs.

The context can then be configured with the function (). The same tls_config object can be used to configure multiple contexts.

After configuration, tls_connect(3) can be called on objects created with (), and tls_accept_socket(3) on objects created with ().

After use, a TLS context should be closed with tls_close(3), and then freed by calling (). If () is called with an argument of NULL , no action occurs.

A TLS context can be reset by calling (), allowing for it to be reused. This is essentially equivalent to calling (), followed by a call to the same function that was used to originally allocate the TLS context.