;ELC
;;; Compiled
;;; in Emacs version 28.2
;;; with all optimizations.



(byte-code "\300\301!\210\302\303\304\305\306\307%\210\310\311\312\313\314DD\315\316\317\320\321&\210\310\322\312\313\323DD\324\320\325\316\326&\210\310\327\312\313\330DD\331\316\332\320\333&\210\310\334\312\313\335DD\336\316\332\320\321&\210\310\337\312\313\340DD\341\320\342\316\343&\210\310\344\312\313\345DD\346\320\321\316\343&\210\310\347\312\313\350DD\351\320\321\316\343&\210\310\352\312\313\353DD\354\316\332\320\355&\207" [require gnutls custom-declare-group tls nil "Transport Layer Security (TLS) parameters." :group comm custom-declare-variable tls-end-of-info funcall function #[0 "\300\207" ["\\(^    Verify return code: .+\n---\n\\|^- Simple Client Mode:\n\\(\n\\|^\\*\\*\\* Starting TLS handshake\n\\)*\\)"] 1 #1=""] "Regexp matching end of TLS client informational messages.\nClient data stream begins after the last character this matches.\nThe default matches the output of \"gnutls-cli\" (version 2.0.1)." :version "22.2" :type regexp tls-program #[0 "\300\207" [("gnutls-cli --x509cafile %t -p %p %h" "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3")] 1 #1#] "List of strings containing commands to start TLS stream to a host.\nEach entry in the list is tried until a connection is successful.\n%h is replaced with the server hostname, %p with the port to\nconnect to, and %t with a file name containing trusted certificates.\nThe program should read input on stdin and write output to stdout.\n\nSee `tls-checktrust' on how to check trusted root certs.\n\nAlso see `tls-success' for what the program should output after\nsuccessful negotiation." (choice (const :tag "Default list of commands" ("gnutls-cli --x509cafile %t -p %p %h" "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3")) (list :tag "Choose commands" :value ("gnutls-cli --x509cafile %t -p %p %h" "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3") (set :inline t (const "gnutls-cli --insecure -p %p %h") (const "gnutls-cli --insecure -p %p %h --protocols ssl3")) (repeat :inline t :tag "Other" (string))) (list :tag "List of commands" (repeat :tag "Command" (string)))) "26.1" tls-process-connection-type #[0 "\300\207" [nil] 1 #1#] "Value for `process-connection-type' to use when starting TLS process." "22.1" boolean tls-success #[0 "\300\207" ["- Handshake was completed\\|SSL handshake has read "] 1 #1#] "Regular expression indicating completed TLS handshakes.\nThe default is what GnuTLS's \"gnutls-cli\" outputs." tls-checktrust #[0 "\300\207" [nil] 1 #1#] "Indicate if certificates should be checked against trusted root certs.\nIf this is `ask', the user can decide whether to accept an\nuntrusted certificate.  You may have to adapt `tls-program' in\norder to make this feature work properly, i.e., to ensure that\nthe external program knows about the root certificates you\nconsider trustworthy, e.g.:\n\n(setq tls-program\n      \\='(\"gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt \\\n-p %p %h\"\n        \"gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt \\\n-p %p %h --protocols ssl3\"))" (choice (const :tag "Always" t) (const :tag "Never" nil) (const :tag "Ask" ask)) "23.1" tls-untrusted #[0 "\300\207" ["- Peer's certificate is NOT trusted\\|Verify return code: \\([^0] \\|.[^ ]\\)"] 1 #1#] "Regular expression indicating failure of TLS certificate verification.\nThe default is what GnuTLS's \"gnutls-cli\" returns in the event of\nunsuccessful verification." tls-hostmismatch #[0 "\300\207" ["# The hostname in the certificate does NOT match"] 1 #1#] "Regular expression indicating a host name mismatch in certificate.\nWhen the host name specified in the certificate doesn't match the\nname of the host you are connecting to, gnutls-cli issues a\nwarning to this effect.  There is no such feature in openssl.  Set\nthis to nil if you want to ignore host name mismatches." tls-certtool-program #[0 "\300\207" ["certtool"] 1 #1#] "Name of GnuTLS certtool.\nUsed by `tls-certificate-information'." string] 8)
#@69 Parse X.509 certificate in DER format into an assoc list.

(fn DER)
(defalias 'tls-certificate-information #[257 "\301\302!\303Q\304r\305\306!q\210\307 \210
c\210\3101'\311ed\312p\313D\312\314&0\202)\210\315\262
\211\304U\205O\313eb\210\316\317\313\312#\203K\320\321!\320\322!B
B\262
\2025\211\237\262
)\207" [tls-certtool-program "-----BEGIN CERTIFICATE-----\n" base64-encode-string "\n-----END CERTIFICATE-----\n" 0 get-buffer-create " *certtool*" erase-buffer (error) call-process-region t nil "--certificate-info" -1 re-search-forward "^\\([^:]+\\): \\(.*\\)" match-string 1 2] 11 (#$ . 4045)])
#@693 Open a TLS connection for a port to a host.
Returns a subprocess-object to represent the connection.
Input and output work as for subprocesses; `delete-process' closes it.
Args are NAME BUFFER HOST PORT.
NAME is name for process.  It is modified if necessary to make it unique.
BUFFER is the buffer (or buffer name) to associate with the process.
 Process output goes at end of that buffer, unless you specify
 a filter function to handle the output.
 BUFFER may be also nil, meaning that this process is not associated
 with any buffer
Third arg is name of the host to connect to, or its IP address.
Fourth arg PORT is an integer specifying a port to connect to.

(fn NAME BUFFER HOST PORT)
(defalias 'open-tls-stream #[1028 "?\306\211\211\203\307\310!\262\202'\311!\203\"\312\311	!!\204'\307!\210rq\210\313\314\"\210\211\204\342\211A\262\242\211\262\203\342	\315\316\317 @B\320B\321\250\203\\\322\f!\202^BE\"
\313\323\"\210\324\f%\262\203\233\325!\326>\203\233eb\210\327
\306\330#\211\262\204\233\331\332\"\204s\333\332!\210\202s\313\334\203\246\335\202\247\336#\210\204\264\337!\210\202\334\306\212\327+\306\330#\205\301\340\225)\211\262\204\321\331\332\"\210\202\265\211\203\330\211b\210\210\262)\266\2022\211\2036
,\203
\212eb\210\327-\306\330#)\203
,\341=\204
\313\342\"\204/
\343\344\345	\"!\203/
.\2036
\212eb\210\327.\306\330#)\2036
\343\346\347	\"!\2046
\306\262
\337!\210e`|\210)\313\350\203G
\335\202H
\336#\210\203\\
\211\203W
\351\306\"\210\352!\210\207" [tls-program tls-process-connection-type process-connection-type shell-file-name shell-command-switch tls-success nil generate-new-buffer " TLS" get-buffer buffer-name message "Opening TLS connection to `%s'..." format-spec 116 gnutls-trustfiles 104 112 number-to-string "Opening TLS connection with `%s'..." start-process process-status (open run) re-search-forward t accept-process-output 1 sit-for "Opening TLS connection with `%s'...%s" "done" "failed" delete-process 0 ask "The certificate presented by `%s' is NOT trusted." yes-or-no-p format-message "The certificate presented by `%s' is NOT trusted.  Accept anyway?" format "Host name in certificate doesn't match `%s'.  Connect anyway?" "Opening TLS connection to `%s'...%s" set-process-buffer kill-buffer tls-end-of-info tls-checktrust tls-untrusted tls-hostmismatch] 17 (#$ . 4659)])
(provide 'tls)