1 /** \file tls.c - collect common TLS functionality
2 * \author Matthias Andree
12 /** return true if user allowed TLS */
13 int maybe_tls(struct query *ctl) {
15 /* opportunistic or forced TLS */
16 return (!ctl->sslproto || !strcasecmp(ctl->sslproto,"tls1"))
24 /** return true if user requires TLS, note though that this code must
25 * always use a logical AND with maybe_tls(). */
26 int must_tls(struct query *ctl) {
29 && (ctl->sslfingerprint || ctl->sslcertck
30 || (ctl->sslproto && !strcasecmp(ctl->sslproto, "tls1")));