Variable: tls-program

tls-program is a customizable variable defined in tls.el.gz.

Value

("gnutls-cli --x509cafile %t -p %p %h"
 "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3")

Documentation

List of strings containing commands to start TLS stream to a host.

Each entry in the list is tried until a connection is successful.
%h is replaced with the server hostname, %p with the port to
connect to, and %t with a file name containing trusted certificates. The program should read input on stdin and write output to stdout.

See tls-checktrust on how to check trusted root certs.

Also see tls-success for what the program should output after successful negotiation.

This variable was added, or its default value changed, in Emacs 26.1.

Probably introduced at or before Emacs version 25.1.

Source Code

;; Defined in /usr/src/emacs/lisp/obsolete/tls.el.gz
(defcustom tls-program
  '("gnutls-cli --x509cafile %t -p %p %h"
    "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3")
  "List of strings containing commands to start TLS stream to a host.
Each entry in the list is tried until a connection is successful.
%h is replaced with the server hostname, %p with the port to
connect to, and %t with a file name containing trusted certificates.
The program should read input on stdin and write output to stdout.

See `tls-checktrust' on how to check trusted root certs.

Also see `tls-success' for what the program should output after
successful negotiation."
  :type
  '(choice
    (const :tag "Default list of commands"
	   ("gnutls-cli --x509cafile %t -p %p %h"
	    "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3"))
    (list :tag "Choose commands"
	  :value
	  ("gnutls-cli --x509cafile %t -p %p %h"
	   "gnutls-cli --x509cafile %t -p %p %h --protocols ssl3")
	  (set :inline t
	       ;; FIXME: add brief `:tag "..."' descriptions.
	       ;; (repeat :inline t :tag "Other" (string))
	       ;; No trust check:
	       (const "gnutls-cli --insecure -p %p %h")
	       (const "gnutls-cli --insecure -p %p %h --protocols ssl3"))
	  (repeat :inline t :tag "Other" (string)))
    (list :tag "List of commands"
	  (repeat :tag "Command" (string))))
  :version "26.1")