pub fn negotiate_cipher(
client_preferred: &[CipherSuite],
server_caps: &HwCaps,
) -> Result<CipherSuite, CoreError>Expand description
Negotiate best cipher suite between client and server.
Returns Err(CoreError::CipherSuiteUnavailable) under --features fips when the client does not offer a FIPS-approved suite
(today: Aes256Gcm). On non-fips builds this never fails; the
return type is Result so the API shape is feature-stable.