X-Git-Url: https://diplodocus.org/git/nmh/blobdiff_plain/b12eee6bb00de96ff2fe781117bdbee6d5ef23e8..592b3e1bc2a812515c5e2d01f087ec0aa2d4e8e4:/uip/post.c?ds=sidebyside

diff --git a/uip/post.c b/uip/post.c
index ef9c8803..16121359 100644
--- a/uip/post.c
+++ b/uip/post.c
@@ -201,7 +201,7 @@ static int saslssf=-1;		/* Our maximum SSF for SASL              */
 static char *saslmech=NULL;	/* Force use of particular SASL mech     */
 static char *user=NULL;		/* Authenticate as this user             */
 static char *port="submission";	/* Name of server port for SMTP submission */
-static int tls=0;		/* Use TLS for encryption		 */
+static int tls=-1;		/* Use TLS for encryption		 */
 static int fromcount=0;		/* Count of addresses on From: header	 */
 static int seensender=0;	/* Have we seen a Sender: header?	 */
 
@@ -602,6 +602,21 @@ main (int argc, char **argv)
     	envelope = from;
     }
 
+    if (tls == -1) {
+#ifdef TLS_SUPPORT
+	/*
+	 * The user didn't specify any of the tls switches.  Try to
+	 * help them by implying -initialtls if they're using port 465
+	 * (smtps, until IANA revoked that registration in 1998).
+	 */
+	tls = ! strcmp (port, "465")  ||  ! strcasecmp (port, "smtps")
+	    ?  2
+	    :  0;
+#else  /* ! TLS_SUPPORT */
+	tls = 0;
+#endif /* ! TLS_SUPPORT */
+    }
+
     /* If we are doing a "whom" check */
     if (whomsw) {
 	/* This won't work with MTS_SENDMAIL_PIPE. */