1 /** \file tls.c - collect common TLS functionality
2 * \author Matthias Andree
12 /** return true if user allowed TLS */
13 int maybe_tls(struct query *ctl) {
15 /* opportunistic or forced TLS */
16 return (!ctl->sslproto || !strcasecmp(ctl->sslproto,"tls1"))
23 /** return true if user requires TLS, note though that this code must
24 * always use a logical AND with maybe_tls(). */
25 int must_tls(struct query *ctl) {
28 && (ctl->sslfingerprint || ctl->sslcertck
29 || (ctl->sslproto && !strcasecmp(ctl->sslproto, "tls1")));