mod_saslauth: Implement RFC 9266 'tls-exporter' channel binding (#1760) Brings back SCRAM-SHA-*-PLUS from its hiatus brought on by the earlier channel binding method being undefined for TLS 1.3, and the increasing deployment of TLS 1.3. See 1bfd238e05ad and #1542 Requires future version of LuaSec, once support for this key material export method is merged. See https://github.com/brunoos/luasec/pull/187

author: Kim Alvefur <zash@zash.se>
date: Wed, 01 Jun 2022 15:06:59 +0200
parent: 12577:f888c84b2284
child: 12629:4c1d3f817063
--- a/CHANGES	Mon Jul 11 20:02:10 2022 +0200
+++ b/CHANGES	Wed Jun 01 15:06:59 2022 +0200
@@ -17,6 +17,7 @@
 ### Security and authentication
 
 - Advertise supported SASL Channel-Binding types (XEP-0440)
+- Implement RFC 9266 'tls-exporter' channel binding with TLS 1.3
 
 ## Removed