1 /** \file tls.c - collect common TLS functionality
2 * \author Matthias Andree
10 /** return true if user allowed TLS */
11 int maybe_tls(struct query *ctl) {
13 /* opportunistic or forced TLS */
14 return (!ctl->sslproto || !strcasecmp(ctl->sslproto,"tls1"))
22 /** return true if user requires TLS, note though that this code must
23 * always use a logical AND with maybe_tls(). */
24 int must_tls(struct query *ctl) {
27 && (ctl->sslfingerprint || ctl->sslcertck
28 || (ctl->sslproto && !strcasecmp(ctl->sslproto, "tls1")));