# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1575298816 -3600
# Node ID 7a3c04789d5c586e18dcb709e3d74897233f914f
# Parent  94cacf9fd0ae89b47a22d2c55abd689e986ae5f7
mod_saslauth: Advertise correct set of mechanisms

Mistakenly iterates over the set of all supported mechanisms instead of
the one without insecure mechanisms if the connection is insecure.

Not a problem if c2s_require_encryption is true

Introduced in 56a0f68b7797

diff -r 94cacf9fd0ae -r 7a3c04789d5c plugins/mod_saslauth.lua
--- a/plugins/mod_saslauth.lua	Sun Dec 01 20:25:20 2019 +0100
+++ b/plugins/mod_saslauth.lua	Mon Dec 02 16:00:16 2019 +0100
@@ -286,7 +286,7 @@
 
 		if not usable_mechanisms:empty() then
 			log("debug", "Offering usable mechanisms: %s", usable_mechanisms);
-			for mechanism in available_mechanisms do
+			for mechanism in usable_mechanisms do
 				mechanisms:tag("mechanism"):text(mechanism):up();
 			end
 			features:add_child(mechanisms);