Changeset

7298:7056bbaf81ee

mod_saslauth: Disable DIGEST-MD5 by default (closes #515)
author Kim Alvefur <zash@zash.se>
date Fri, 18 Mar 2016 11:51:58 +0100
parents 7294:5f4d0753c818
children 7299:b7dea8fd09c7
files plugins/mod_saslauth.lua
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/plugins/mod_saslauth.lua	Fri Mar 18 00:08:33 2016 +0100
+++ b/plugins/mod_saslauth.lua	Fri Mar 18 11:51:58 2016 +0100
@@ -19,7 +19,7 @@
 local secure_auth_only = module:get_option_boolean("c2s_require_encryption", module:get_option_boolean("require_encryption", false));
 local allow_unencrypted_plain_auth = module:get_option_boolean("allow_unencrypted_plain_auth", false)
 local insecure_mechanisms = module:get_option_set("insecure_sasl_mechanisms", allow_unencrypted_plain_auth and {} or {"PLAIN", "LOGIN"});
-local disabled_mechanisms = module:get_option_set("disable_sasl_mechanisms", {});
+local disabled_mechanisms = module:get_option_set("disable_sasl_mechanisms", { "DIGEST-MD5" });
 
 local log = module._log;