summaryrefslogtreecommitdiff
path: root/lisp/net/tls.el
diff options
context:
space:
mode:
Diffstat (limited to 'lisp/net/tls.el')
-rw-r--r--lisp/net/tls.el21
1 files changed, 17 insertions, 4 deletions
diff --git a/lisp/net/tls.el b/lisp/net/tls.el
index d4fa8c2e73c..ad0768968e5 100644
--- a/lisp/net/tls.el
+++ b/lisp/net/tls.el
@@ -75,9 +75,14 @@ and `gnutls-cli' (version 2.0.1) output."
:type 'regexp
:group 'tls)
-(defcustom tls-program '("gnutls-cli -p %p %h"
- "gnutls-cli -p %p %h --protocols ssl3"
- "openssl s_client -connect %h:%p -no_ssl2 -ign_eof")
+(defvar tls-starttls-switches
+ '(("gnutls-cli" "-s")
+ ("openssl" "-starttls imap"))
+ "Alist of programs and the switches necessary to get starttls behaviour.")
+
+(defcustom tls-program '("gnutls-cli %s -p %p %h"
+ "gnutls-cli %s -p %p %h --protocols ssl3"
+ "openssl s_client %s -connect %h:%p -no_ssl2 -ign_eof")
"List of strings containing commands to start TLS stream to a host.
Each entry in the list is tried until a connection is successful.
%h is replaced with server hostname, %p with port to connect to.
@@ -199,7 +204,7 @@ Used by `tls-certificate-information'."
(push (cons (match-string 1) (match-string 2)) vals))
(nreverse vals))))))
-(defun open-tls-stream (name buffer host port)
+(defun open-tls-stream (name buffer host port &optional starttlsp)
"Open a TLS connection for a port to a host.
Returns a subprocess-object to represent the connection.
Input and output work as for subprocesses; `delete-process' closes it.
@@ -229,6 +234,9 @@ Fourth arg PORT is an integer specifying a port to connect to."
(format-spec
cmd
(format-spec-make
+ ?s (if starttlsp
+ (tls-find-starttls-argument cmd)
+ "")
?h host
?p (if (integerp port)
(int-to-string port)
@@ -300,6 +308,11 @@ match `%s'. Connect anyway? " host))))))
(kill-buffer buffer))
done))
+(defun tls-find-starttls-argument (command)
+ (let ((command (car (split-string command))))
+ (or (cadr (assoc command tls-starttls-switches))
+ "")))
+
(provide 'tls)
;;; tls.el ends here