tls iwthout sockets

[Simon Josefsson]

Trixter aka Bret McDanel <trixter at 0xdecafbad.com> writes:

> I have a quirky app that while connection based is not tcp based.  I am
> looking for some way to use tls (or something comparable in terms of
> peer review, security, etc) for authentication of both ends of the
> connection.
>
> Is there an example of how to use gnutls without it managing the socket?

Nikos answered, but I just wanted to add that you can see the mini.c for
an example how to write a GnuTLS application with both client and server
code in it without any sockets:

http://git.savannah.gnu.org/cgit/gnutls.git/tree/tests/mini.c

> Is there something better than TLS for authentication (may be anonymous
> or certificate based) given the fact that it wont be over a tcp link?

There is IPSEC but it seems TLS is better here.  You could also consider
stored security formats like OpenPGP or S/MIME.

/Simon