# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1611959005 -3600
# Node ID c567e5e2b77ac466df71857507958b944e24aee4
# Parent  a7109eb45e3016d66531ea0681f749c3a08a2c25
mod_tls: Ignore lack of STARTTLS offer only when s2s_require_encryption set

diff -r a7109eb45e30 -r c567e5e2b77a plugins/mod_tls.lua
--- a/plugins/mod_tls.lua	Fri Jan 29 23:17:08 2021 +0100
+++ b/plugins/mod_tls.lua	Fri Jan 29 23:23:25 2021 +0100
@@ -153,8 +153,11 @@
 	if can_do_tls(session) then
 		if stanza:get_child("starttls", xmlns_starttls) then
 			module:log("debug", "%s is offering TLS, taking up the offer...", session.to_host);
+		elseif s2s_require_encryption then
+			module:log("debug", "%s is *not* offering TLS, trying anyways!", session.to_host);
 		else
-			module:log("debug", "%s is *not* offering TLS, trying anyways!", session.to_host);
+			module:log("debug", "%s is not offering TLS", session.to_host);
+			return;
 		end
 		session.sends2s(starttls_initiate);
 		return true;