package Net::IMAP::Server::Command::Starttls;

use warnings;
use strict;

use base qw/Net::IMAP::Server::Command/;

sub validate {
    my $self = shift;

    return $self->bad_command("Already logged in")
        unless $self->connection->is_unauth;

    my @options = $self->parsed_options;
    return $self->bad_command("Too many options") if @options;

    return $self->no_command("STARTTLS is disabled")
      unless $self->connection->capability =~ /\bSTARTTLS\b/;

    return 1;
}

sub run {
    my $self = shift;

    unless (-r "certs/server-cert.pem" and -r "certs/server-key.pem") {
        return $self->bad_command("Server error");
    }

    $self->ok_completed;

    $self->connection->io_handle->start_SSL;
}

1;