mod_saslauth: Requiring c2s encryption means requiring c2s encryption... thanks Flo

Mon, 21 Dec 2009 22:00:49 +0000

author
Matthew Wild <mwild1@gmail.com>
date
Mon, 21 Dec 2009 22:00:49 +0000
changeset 2784
e165414a454c
parent 2783
57611584e27d
child 2785
08e0659ba1f2

mod_saslauth: Requiring c2s encryption means requiring c2s encryption... thanks Flo

plugins/mod_saslauth.lua file | annotate | diff | comparison | revisions
--- a/plugins/mod_saslauth.lua	Thu Dec 17 21:50:02 2009 +0000
+++ b/plugins/mod_saslauth.lua	Mon Dec 21 22:00:49 2009 +0000
@@ -115,6 +115,9 @@
 		if not session.sasl_handler then
 			return session.send(build_reply("failure", "invalid-mechanism"));
 		end
+		if secure_auth_only and not session.secure then
+			return session.send(build_reply("failure", "encryption-required"));
+		end
 	elseif not session.sasl_handler then
 		return; -- FIXME ignoring out of order stanzas because ejabberd does
 	end

mercurial