# HG changeset patch # User Kim Alvefur # Date 1381143381 -7200 # Node ID 87e2fafba5df2ac7e43ca37d46ecf38edbae9902 # Parent e327f2d4e09fa65547333ec73e8785d911ac38b0 mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted diff -r e327f2d4e09f -r 87e2fafba5df plugins/mod_saslauth.lua --- a/plugins/mod_saslauth.lua Mon Oct 07 12:43:00 2013 +0200 +++ b/plugins/mod_saslauth.lua Mon Oct 07 12:56:21 2013 +0200 @@ -242,7 +242,7 @@ return; end origin.sasl_handler = usermanager_get_sasl_handler(module.host, origin); - if origin.secure then + if origin.encrypted then -- check wether LuaSec has the nifty binding to the function needed for tls-unique -- FIXME: would be nice to have this check only once and not for every socket if origin.conn:socket().getpeerfinished then