- TLS_HOOKS support turned on by default (this means that to use tls

  one needs only to compile the tls module, load it and add enable_tls=1
   in the config). make TLS_HOOKS=0 will compile without tls hooks support.
   make CORE_TLS=1 will automatically disable the hooks and will try
  to compile with the old tls-in-core.

Makefile

@@ -203,6 +203,10 @@ utils_install=	utils/gen_ha1/gen_ha1 utils/serunix/serunix \
 
 ALLDEP=Makefile Makefile.sources Makefile.defs Makefile.rules
 
+# by default compile with tls hooks support (so that no ser recompile is
+#  needed before the tls module can be used)
+TLS_HOOKS=1
+
 #include general defs (like CC, CFLAGS  a.s.o)
 # hack to force makefile.defs re-inclusion (needed when make calls itself with
 # other options -- e.g. make bin)

NEWS

@@ -10,6 +10,8 @@ new archs:
 
 
 modules:
+ - tls        - new module that enables tls support (set enable_tls=yes
+                in the config file and load the tls module)
  - ctl        - new  fifo/unixsocket/xmlrpc like module, using a space 
                 efficient binary encoding for the requests.
                 It supports multiple clients on tcp, udp, unix stream or
@@ -89,6 +91,9 @@ modules:
               Vias a.s.o) and not on the original message
  
 core:
+ - compiled by default with tls hooks support (so that no recompile is
+   needed before loading the tls module and enabling the tls support)
+ -  enable_tls config option added (the reverse of disable_tls)
  - added STUN keep-alive functionality in accordance with 
    draft-ietf-behave-rfc3489bis-04.txt
  - dns cache and dns failover support added (see doc/dns.txt)
@@ -177,6 +182,9 @@ core:
    are available (see tm docs)
 - avps directly accessible from script with %avp_name (variable style)
 new config variables:
+   enable_tls/disable_tls = enable/disable tls support, default disable.
+       Note: a tls "engine" is still needed (e.g. the tls module must
+              be loaded, enable_tls by itself is not enough).
    exit_timeout = seconds - how much time ser will wait for all the shutdown
        procedures to complete. If this time is exceeded, all the remaining
        processes are immediately killed and ser exits immediately (it might