Diff

plugins/mod_saslauth.lua @ 10481:7a3c04789d5c

mod_saslauth: Advertise correct set of mechanisms Mistakenly iterates over the set of all supported mechanisms instead of the one without insecure mechanisms if the connection is insecure. Not a problem if c2s_require_encryption is true Introduced in 56a0f68b7797
author Kim Alvefur <zash@zash.se>
date Mon, 02 Dec 2019 16:00:16 +0100
parent 10340:5c6912289ce3
child 10487:02ccf2fbf000
line wrap: on
line diff
--- a/plugins/mod_saslauth.lua	Sun Dec 01 20:25:20 2019 +0100
+++ b/plugins/mod_saslauth.lua	Mon Dec 02 16:00:16 2019 +0100
@@ -286,7 +286,7 @@
 
 		if not usable_mechanisms:empty() then
 			log("debug", "Offering usable mechanisms: %s", usable_mechanisms);
-			for mechanism in available_mechanisms do
+			for mechanism in usable_mechanisms do
 				mechanisms:tag("mechanism"):text(mechanism):up();
 			end
 			features:add_child(mechanisms);