tls_ctx_init(&ctx, TLS_protocol_tlcp, TLS_server_mode)
tls_ctx_set_cipher_suites(&ctx, server_ciphers, sizeof(server_ciphers)/sizeof(int))
tls_ctx_set_tlcp_server_certificate_and_keys(&ctx, certfile, signkeyfile, signpass, enckeyfile, encpass)
	tls_ctx_set_ca_certificates(&ctx, cacertfile, TLS_DEFAULT_VERIFY_DEPTH)

bind
accept

tls_init(&conn, &ctx)
tls_set_socket(&conn, conn_sock)
tls_do_handshake(&conn)
tls_recv
tls_send
tls_socket_close




tls_ctx_init
tls_ctx_set_cipher_suites










{ERR_REASON(SSL_R_DECRYPTION_FAILED), "decryption failed"},  
{ERR_REASON(SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC),  
 "decryption failed or bad record mac"},


SSL_read /  / ssl3_get_record