-BOOL tls_certificate_verified = FALSE;
-uschar *tls_cipher = NULL;
-uschar *tls_peerdn = NULL;
-#ifndef USE_GNUTLS
-uschar *tls_sni = NULL;
+tls_support tls_in = {
+ -1, /* tls_active */
+ 0, /* bits */
+ FALSE, /* tls_certificate_verified */
+#ifdef EXPERIMENTAL_DANE
+ FALSE, /* dane_verified */
+ 0, /* tlsa_usage */