class tls_endpoint :?start_pos_in:int -> ?start_pos_out:int -> ?resume:string -> role:[ `Client | `Server ] -> peer_name:string option -> Unix.file_descr -> Netsys_crypto_types.tls_config ->tls_channel
tls_layer, and to preferred
if you have direct access to the file descriptors.