@@ -15,71 +15,17 @@
 
 #import "OFObject.h"
 
 OF_ASSUME_NONNULL_BEGIN
 
-@class OFString;
-@class OFDictionary OF_GENERIC(KeyType, ObjectType);
-@protocol OFTLSSocket;
-
-/**
- * @protocol OFTLSSocketDelegate OFTLSSocket.h ObjFW/OFTLSSocket.h
- *
- * @brief A delegate for classes implementing the OFTLSSocket protocol.
- */
-@protocol OFTLSSocketDelegate <OFTCPSocketDelegate>
-@optional
-/**
- * @brief This callback is called when the TLS socket wants to know if it
- *	  should accept the received certificate.
- *
- * @note This is only used to verify certain fields of a certificate to allow
- *	 for protocol specific verification. The certificate chain is verified
- *	 using the specified CAs, or the system's CAs if no CAs have been
- *	 specified.
- *
- * @param socket The socket which wants to know if it should accept the received
- *		 certificate
- * @param certificate A dictionary with the fields of the received certificate
- * @return Whether the TLS socket should accept the received certificate chain
- */
--	     (bool)socket: (id <OFTLSSocket>)socket
-  shouldAcceptCertificate: (OFDictionary *)certificate;
-@end
-
 /**
  * @protocol OFTLSSocket OFTLSSocket.h ObjFW/OFTLSSocket.h
  *
  * @brief A protocol that should be implemented by 3rd-party libraries
  *	  implementing TLS.
  */
 @protocol OFTLSSocket
-/**
- * @brief The delegate for the TLS socket.
- */
-@property OF_NULLABLE_PROPERTY (assign, nonatomic)
-    id <OFTLSSocketDelegate> delegate;
-
-/**
- * @brief The path to the X.509 certificate file to use.
- */
-@property OF_NULLABLE_PROPERTY (copy, nonatomic) OFString *certificateFile;
-
-/**
- * @brief The path to the PKCS#8 private key file to use.
- */
-@property OF_NULLABLE_PROPERTY (copy, nonatomic) OFString *privateKeyFile;
-
-/**
- * @brief The passphrase to decrypt the PKCS#8 private key file.
- *
- * @warning You have to ensure that this is in secure memory protected from
- *	    swapping! This is also the reason why this is not an OFString.
- */
-@property OF_NULLABLE_PROPERTY (assign, nonatomic)
-    const char *privateKeyPassphrase;
-
 /**
  * @brief Whether certificates are verified.
  *
  * The default is enabled.
  */
@@ -90,95 +36,8 @@
  *	  underlying socket.
  *
  * @param socket The TCP socket to use as underlying socket
  */
 - (instancetype)initWithSocket: (OFTCPSocket *)socket;
-
-/**
- * @brief Initiates the TLS handshake.
- *
- * @note This is only useful if you used @ref initWithSocket: to start TLS on
- *	 a TCP socket which is already connected!
- *
- * @param host The host to expect for certificate verification.
- *	       May be `nil` if certificate verification is disabled.
- */
-- (void)startTLSWithExpectedHost: (nullable OFString *)host;
-
-/**
- * @brief Sets the path to the X.509 certificate file to use for the specified
- *	  SNI host.
- *
- * @param SNIHost The SNI host for which the path of the X.509 certificate file
- *		  should be set
- *
- * @param certificateFile The path to the X.509 certificate file
- */
-- (void)setCertificateFile: (OFString *)certificateFile
-		forSNIHost: (OFString *)SNIHost;
-
-/**
- * @brief Returns the path of the X.509 certificate file used by the TLS socket
- *	  for the specified SNI host.
- *
- * @param SNIHost The SNI host for which the path of the X.509 certificate file
- *		  should be returned
- *
- * @return The path of the X.509 certificate file used by the TLS socket for
- *	   the specified SNI host
- */
-- (nullable OFString *)certificateFileForSNIHost: (OFString *)SNIHost;
-
-/**
- * @brief Sets the path to the PKCS#8 private key file to use for the specified
- *	  SNI host.
- *
- * @param privateKeyFile The path to the PKCS#8 private key file
- * @param SNIHost The SNI host for which the path to the PKCS#8 private key
- *		  file should be set
- */
-- (void)setPrivateKeyFile: (OFString *)privateKeyFile
-	       forSNIHost: (OFString *)SNIHost;
-
-/**
- * @brief Returns the path of the PKCS#8 private key file used by the TLS
- *	  socket for the specified SNI host.
- *
- * @param SNIHost The SNI host for which the path of the PKCS#8 private key
- *		  file should be returned
- *
- * @return The path of the PKCS#8 private key file used by the TLS socket for
- *	   the specified SNI host
- */
-- (nullable OFString *)privateKeyFileForSNIHost: (OFString *)SNIHost;
-
-/**
- * @brief Sets the passphrase to decrypt the PKCS#8 private key file for the
- *	  specified SNI host.
- *
- * @warning You have to ensure that this is in secure memory protected from
- *	    swapping! This is also the reason why this is not an OFString.
- *
- * @param privateKeyPassphrase The passphrase to decrypt the PKCS#8 private
- *			       key file for the specified SNI host
- * @param SNIHost The SNI host for which the passphrase to decrypt the PKCS#8
- *		  private key file should be set
- */
-- (void)setPrivateKeyPassphrase: (const char *)privateKeyPassphrase
-		     forSNIHost: (OFString *)SNIHost;
-
-/**
- * @brief Returns the passphrase to decrypt the PKCS#8 private key file for the
- *	  specified SNI host.
- *
- * @warning You should not copy this to insecure memory which is swappable!
- *
- * @param SNIHost The SNI host for which the passphrase to decrypt the PKCS#8
- *		  private key file should be returned
- *
- * @return The passphrase to decrypt the PKCS#8 private key file for the
- *	   specified SNI host
- */
-- (nullable const char *)privateKeyPassphraseForSNIHost: (OFString *)SNIHost;
 @end
 
 OF_ASSUME_NONNULL_END