# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1606164986 -3600
# Node ID 5fb6563eee1e208a2d0f4e24a5e2df0587770cbd
# Parent  1151140fc7579eb9df9107dddc50b59647288daf# Parent  992c4498a1e33d18a37efbee0502b89f53138f55
Merge 0.11->trunk

diff -r 1151140fc757 -r 5fb6563eee1e plugins/mod_saslauth.lua
--- a/plugins/mod_saslauth.lua	Mon Nov 23 20:39:47 2020 +0000
+++ b/plugins/mod_saslauth.lua	Mon Nov 23 21:56:26 2020 +0100
@@ -260,7 +260,10 @@
 			-- FIXME: would be nice to have this check only once and not for every socket
 			if sasl_handler.add_cb_handler then
 				local socket = origin.conn:socket();
-				if socket.getpeerfinished then
+				local info = socket.info and socket:info();
+				if info.protocol == "TLSv1.3" then
+					log("debug", "Channel binding 'tls-unique' undefined in context of TLS 1.3");
+				elseif socket.getpeerfinished and socket:getpeerfinished() then
 					log("debug", "Channel binding 'tls-unique' supported");
 					sasl_handler:add_cb_handler("tls-unique", tls_unique);
 				else