Comparison

mod_tls: Add "support" for <failure> by closing gracefully Nicer than the "unsupported stanza type" error we get otherwise.

comparison

equal deleted inserted replaced

-:ec4f0ec3c0d5
+:9ad5ec65132d
 		session.conn:starttls(session.ssl_ctx);
 		session.secure = false;
 		return true;
 	end
 end);
+module:hook_tag(xmlns_starttls, "failure", function (session, stanza) -- luacheck: ignore 212/stanza
+	module:log("warn", "TLS negotiation with %s failed.", session.to_host);
+	session:close(nil, "TLS negotiation failed");
+	return false;
+end);