#ifndef TLS_REMOTE_H
#define TLS_REMOTE_H

#include <openssl/ssl.h>

/* the version is like this: 0xMNNFFPPS: major minor fix patch status */
#if OPENSSL_VERSION_NUMBER < 0x00908000L
  #error "Need OpenSSL version at least 0.9.8"
#endif

extern char *tlsdestinfo;
extern struct constmap maptlsdestinations;
extern char *tlsdomaininfo;
extern struct constmap mapdomaincerts;
extern stralloc ciphers;

int tls_domaincerts(const stralloc);
int tls_destination(const stralloc);
int tlsa_check(const STACK_OF(X509) *, const stralloc, const unsigned long);
int tls_fingerprint(X509 *, const char *, const int);
int tls_chainfile(SSL_CTX *, const char *);
int tls_certkey(SSL_CTX *, const char *, const char *, char *);
int tls_conn(SSL *, int);
int tls_setup(int, char *, char *);
int tls_checkpeer(SSL *, X509 *, const stralloc, const int, const int);
int tls_checkcrl(SSL *);
int tls_error(void);
int tls_exit(SSL *);

int utf8string(unsigned char *, int);

#endif