;ELC
;;; Compiled by mockbuild@c6b10.bsys.dev.centos.org on Wed Jul 17 09:53:57 2013
;;; from file /builddir/build/BUILD/emacs-23.1/site-lisp/ssl.el
;;; in Emacs version 23.1.1
;;; with all optimizations.

;;; This file uses dynamic docstrings, first added in Emacs 19.29.
(if (and (boundp 'emacs-version)
	 (< (aref emacs-version (1- (length emacs-version))) ?A)
	 (or (and (boundp 'epoch::version) epoch::version)
	     (string-lessp emacs-version "19.29")))
    (error "`ssl.el' was compiled for Emacs 19.29 or later"))

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;


(byte-code "\300\301!\210\300\302!\210\303\304\305\217\210\306\307!\203\310\311!\204!\312\313M\210\314\315M\210\316\317\303\320\321\322%\207" [require cl base64 nil (byte-code "\300\301!\207" [require custom] 2) ((error)) featurep custom fboundp custom-declare-variable defgroup (macro . #[(&rest args) "\300\207" [nil] 1]) defcustom (macro . #[(var value doc &rest args) "\303	\nF\207" [var value doc defvar] 4]) custom-declare-group ssl "Support for `Secure Sockets Layer' encryption." :group comm] 6)
#@40 *Directory to store CA certificates in
(custom-declare-variable 'ssl-certificate-directory '"~/.w3/certs/" '(#$ . -1111) :group 'ssl :type 'directory)
#@97 *Program to run after adding a cert to a directory .
Run with one argument, the directory name.
(custom-declare-variable 'ssl-rehash-program-name '"c_rehash" '(#$ . -1268) :group 'ssl :type 'string)
#@72 *The program to run to provide a human-readable view of a certificate.
(custom-declare-variable 'ssl-view-certificate-program-name '"x509" '(#$ . -1473) :group 'ssl :type 'string)
#@154 *Arguments that should be passed to the certificate viewing program.
The certificate is piped to it.
Maybe a way of passing a file should be implemented
(custom-declare-variable 'ssl-view-certificate-program-arguments ''("-text" "-inform" "DER") '(#$ . -1660) :group 'ssl :type 'list)
#@148 *Style of cert database to use, the only valid value right now is `ssleay'.
This means a directory of pem encoded certificates with hash symlinks.
(custom-declare-variable 'ssl-certificate-directory-style ''ssleay '(#$ . -1952) :group 'ssl :type '(choice (const :tag "SSLeay" :value ssleay) (const :tag "OpenSSL" :value openssl)))
#@53 *How far up the certificate chain we should verify.
(custom-declare-variable 'ssl-certificate-verification-policy '0 '(#$ . -2289) :group 'ssl :type '(choice (const :tag "No verification" :value 0) (const :tag "Verification required" :value 1) (const :tag "Reject connection if verification fails" :value 3) (const :tag "SSL_VERIFY_CLIENT_ONCE" :value 5)))
#@64 *The program to run in a subprocess to open an SSL connection.
(custom-declare-variable 'ssl-program-name '"openssl" '(#$ . -2652) :group 'ssl :type 'string)
#@353 *Arguments that should be passed to the program `ssl-program-name'.
This should be used if your SSL program needs command line switches to
specify any behaviour (certificate file locations, etc).
The special symbols 'host and 'port may be used in the list of arguments
and will be replaced with the hostname and service/port that will be connected
to.
(custom-declare-variable 'ssl-program-arguments ''("s_client" "-quiet" "-host" host "-port" service "-verify" (int-to-string ssl-certificate-verification-policy) "-CApath" ssl-certificate-directory) '(#$ . -2817) :group 'ssl :type 'list)
#@72 Return an assoc list of information about a certificate in DER format.
(defalias 'ssl-certificate-information #[(der) "\304\305!\306Q\307\212\310\311!q\210\312 \210\nc\210\313\314\315\217\211\307U\205<\313eb\210\316\317\313\320#\203:\321\322!\321\323!BB\202%)+\207" [der exit-code certificate vals "-----BEGIN CERTIFICATE-----\n" base64-encode-string "\n-----END CERTIFICATE-----\n" 0 get-buffer-create " *openssl*" erase-buffer nil (byte-code "\301ed\302p\303D\302\304\305\306\307\310\311&\f\207" [ssl-program-name call-process-region t nil "x509" "-subject" "-issuer" "-dates" "-serial" "-noout"] 13) ((error -1)) re-search-forward "^\\([^=\n
]+\\)\\s *=\\s *\\(.*\\)" t match-string 1 2] 5 (#$ . 3413)])
#@174 Ask if the user is willing to accept a new CA certificate. The buffer-name
should be the intended name of the certificate, and the buffer should probably
be in DER encoding
(defalias 'ssl-accept-ca-certificate #[nil "\306\307\310!\212\311\312ed\n\306	\313&\314=\205.\315	!\205.eb\205.\316 \210\317\320!\205.\321	!)\211\205q\322
!\204>\323
!\210\324=\205q\325ed\"\210eb\210\326c\210db\210\327c\210\330\331\332 !\333P
\"\334!\210\335 \306\211\211\330
!%)+\207" [process-connection-type tmpbuf ssl-view-certificate-program-name ssl-view-certificate-program-arguments response ssl-certificate-directory nil generate-new-buffer "X509 CA Certificate Information" apply call-process-region t 0 switch-to-buffer recenter yes-or-no-p "Accept this CA to vouch for secure server identities? " kill-buffer file-directory-p make-directory ssleay base64-encode-region "-----BEGIN CERTIFICATE-----\n" "-----END CERTIFICATE-----\n" expand-file-name file-name-sans-extension buffer-name ".pem" write-file call-process ssl-certificate-directory-style f ssl-rehash-program-name] 10 (#$ . 4139)])
#@731 Open a SSL connection for a service to a host.
Returns a subprocess-object to represent the connection.
Input and output work as for subprocesses; `delete-process' closes it.
Args are NAME BUFFER HOST SERVICE.
NAME is name for process.  It is modified if necessary to make it unique.
BUFFER is the buffer (or buffer-name) to associate with the process.
 Process output goes at end of that buffer, unless you specify
 an output stream or filter function to handle the output.
 BUFFER may be also nil, meaning that this process is not associated
 with any buffer
Third arg is name of the host to connect to, or its IP address.
Fourth arg SERVICE is name of the service desired, or an integer
specifying a port number to connect to.
(defalias 'open-ssl-stream #[(name buffer host service) "\250\203	\305!\306\307\310\311\312\313BBBB!\314\f!\210\f+\207" [service process-connection-type port ssl-program-arguments proc int-to-string nil eval start-process name buffer ssl-program-name process-kill-without-query] 6 (#$ . 5242)])
(provide 'ssl)