blob: 0488260136725474fa95b24cd1dce11cb8f9e0e7 [file] [log] [blame]
Paul Bakker3c18a832012-01-23 09:44:43 +00001/**
Paul Bakker37ca75d2011-01-06 12:28:03 +00002 * @file
3 * Main page documentation file.
Manuel Pégourié-Gonnard8119dad2015-08-06 10:59:26 +02004 *
5 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
6 *
7 * This file is part of mbed TLS (https://tls.mbed.org)
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
13 *
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
18 *
19 * You should have received a copy of the GNU General Public License along
20 * with this program; if not, write to the Free Software Foundation, Inc.,
21 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
Paul Bakker37ca75d2011-01-06 12:28:03 +000022 */
23
24/**
Paul Bakker4cb87f42015-07-10 14:09:43 +010025 * @mainpage mbed TLS v2.0.0 source code documentation
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020026 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000027 * This documentation describes the internal structure of mbed TLS. It was
Paul Bakker37ca75d2011-01-06 12:28:03 +000028 * automatically generated from specially formatted comment blocks in
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000029 * mbed TLS's source code using Doxygen. (See
Paul Bakker37ca75d2011-01-06 12:28:03 +000030 * http://www.stack.nl/~dimitri/doxygen/ for more information on Doxygen)
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020031 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000032 * mbed TLS has a simple setup: it provides the ingredients for an SSL/TLS
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020033 * implementation. These ingredients are listed as modules in the
34 * \ref mainpage_modules "Modules section". This "Modules section" introduces
35 * the high-level module concepts used throughout this documentation.\n
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000036 * Some examples of mbed TLS usage can be found in the \ref mainpage_examples
Paul Bakker37ca75d2011-01-06 12:28:03 +000037 * "Examples section".
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020038 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000039 * @section mainpage_modules Modules
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020040 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000041 * mbed TLS supports SSLv3 up to TLSv1.2 communication by providing the
Paul Bakker37ca75d2011-01-06 12:28:03 +000042 * following:
43 * - TCP/IP communication functions: listen, connect, accept, read/write.
44 * - SSL/TLS communication functions: init, handshake, read/write.
45 * - X.509 functions: CRT, CRL and key handling
46 * - Random number generation
47 * - Hashing
48 * - Encryption/decryption
49 *
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020050 * Above functions are split up neatly into logical interfaces. These can be
51 * used separately to provide any of the above functions or to mix-and-match
52 * into an SSL server/client solution that utilises a X.509 PKI. Examples of
53 * such implementations are amply provided with the source code.
54 *
Manuel Pégourié-Gonnardb4fe3cb2015-01-22 16:11:05 +000055 * Note that mbed TLS does not provide a control channel or (multiple) session
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020056 * handling without additional work from the developer.
Paul Bakker37ca75d2011-01-06 12:28:03 +000057 *
58 * @section mainpage_examples Examples
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020059 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000060 * Example server setup:
61 *
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020062 * \b Prerequisites:
Paul Bakker37ca75d2011-01-06 12:28:03 +000063 * - X.509 certificate and private key
64 * - session handling functions
65 *
66 * \b Setup:
67 * - Load your certificate and your private RSA key (X.509 interface)
68 * - Setup the listening TCP socket (TCP/IP interface)
69 * - Accept incoming client connection (TCP/IP interface)
70 * - Initialise as an SSL-server (SSL/TLS interface)
71 * - Set parameters, e.g. authentication, ciphers, CA-chain, key exchange
72 * - Set callback functions RNG, IO, session handling
73 * - Perform an SSL-handshake (SSL/TLS interface)
74 * - Read/write data (SSL/TLS interface)
75 * - Close and cleanup (all interfaces)
76 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000077 * Example client setup:
78 *
79 * \b Prerequisites:
80 * - X.509 certificate and private key
81 * - X.509 trusted CA certificates
82 *
83 * \b Setup:
84 * - Load the trusted CA certificates (X.509 interface)
85 * - Load your certificate and your private RSA key (X.509 interface)
86 * - Setup a TCP/IP connection (TCP/IP interface)
87 * - Initialise as an SSL-client (SSL/TLS interface)
88 * - Set parameters, e.g. authentication mode, ciphers, CA-chain, session
89 * - Set callback functions RNG, IO
90 * - Perform an SSL-handshake (SSL/TLS interface)
91 * - Verify the server certificate (SSL/TLS interface)
92 * - Write/read data (SSL/TLS interface)
93 * - Close and cleanup (all interfaces)
Paul Bakker37ca75d2011-01-06 12:28:03 +000094 */