STARTTLS enforcement for sslproto != "tls1".

Fetchmail < 6.4.2 used to only consider --sslproto=TLS1 as "mandatory
STARTTLS" unless sslcertck or sslfingerprint were given, now all
protocol versions will require STARTTLS.

This did not matter in the default install because sslcertck defaults
to on, but could permit fetchmail to continue with unencrypted
connections if --nosslcertck was in use.

1 files changed, 1 insertions, 1 deletions

diff --git a/starttls.c b/starttls.c
index 2df08cd9..b35f2970 100644
--- a/starttls.c
+++ b/starttls.c
@@ -29,7 +29,7 @@ int must_starttls(struct query *ctl) {
 #ifdef SSL_ENABLE
     return maybe_starttls(ctl)
 	&& (ctl->sslfingerprint || ctl->sslcertck
-		|| (ctl->sslproto && !strcasecmp(ctl->sslproto, "tls1")));
+		|| (ctl->sslproto && ctl->sslproto[0]));
 #else
     (void)ctl;
     return 0;