mod_saslauth: Advertise correct set of mechanisms
Mistakenly iterates over the set of all supported mechanisms instead of
the one without insecure mechanisms if the connection is insecure.
Not a problem if c2s_require_encryption is true
Introduced in 56a0f68b7797
--- a/plugins/mod_saslauth.lua Sun Dec 01 20:25:20 2019 +0100
+++ b/plugins/mod_saslauth.lua Mon Dec 02 16:00:16 2019 +0100
@@ -286,7 +286,7 @@
if not usable_mechanisms:empty() then
log("debug", "Offering usable mechanisms: %s", usable_mechanisms);
- for mechanism in available_mechanisms do
+ for mechanism in usable_mechanisms do
mechanisms:tag("mechanism"):text(mechanism):up();
end
features:add_child(mechanisms);