various: Require encryption by default for real These options have been specified (and enabled) in the default config file for a long time. However if unspecified in the config, they were not enabled. Now they are. This may result in a change of behaviour for people using very old config files that lack the require_encryption options. But that's what we want.

author: Kim Alvefur <zash@zash.se>
date: Sat, 25 Dec 2021 16:23:40 +0100
parent: 11526:15a3db955ad3
child: 12333:ed8a4f8dfd27
--- a/plugins/mod_saslauth.lua	Thu Feb 10 15:49:01 2022 +0000
+++ b/plugins/mod_saslauth.lua	Sat Dec 25 16:23:40 2021 +0100
@@ -17,7 +17,7 @@
 
 local usermanager_get_sasl_handler = require "core.usermanager".get_sasl_handler;
 
-local secure_auth_only = module:get_option_boolean("c2s_require_encryption", module:get_option_boolean("require_encryption", false));
+local secure_auth_only = module:get_option_boolean("c2s_require_encryption", module:get_option_boolean("require_encryption", true));
 local allow_unencrypted_plain_auth = module:get_option_boolean("allow_unencrypted_plain_auth", false)
 local insecure_mechanisms = module:get_option_set("insecure_sasl_mechanisms", allow_unencrypted_plain_auth and {} or {"PLAIN", "LOGIN"});
 local disabled_mechanisms = module:get_option_set("disable_sasl_mechanisms", { "DIGEST-MD5" });