#ifndef TLS_REMOTE_H
#define TLS_REMOTE_H

#include <openssl/ssl.h>

/* the version is like this: 0xMNNFFPPS: major minor fix patch status */
#if OPENSSL_VERSION_NUMBER < 0x00908000L
# error "Need OpenSSL version at least 0.9.8"
#endif

extern char *tlsdestinfo;
extern struct constmap maptlsdestinations;
extern char *tlsdomaininfo;
extern struct constmap mapdomaincerts;
extern stralloc ciphers;

int tls_domaincerts(const stralloc);
int tls_destination(const stralloc);
int tlsa_check(const STACK_OF(X509) *,const stralloc,const unsigned long);
int tls_fingerprint(X509 *,const char *,const int);
int tls_chainfile(SSL_CTX *,const char *);
int tls_certkey(SSL_CTX *,const char *,const char *,char *);
int tls_conn(SSL *,int);
int tls_setup(int,char *,char *);
int tls_checkpeer(SSL *,X509 *,const stralloc,const int,const int);
int tls_checkcrl(SSL *);
int tls_error(void);
int tls_exit(SSL *);

int utf8string(unsigned char *,int);

#endif