comparison mod_sasl2/mod_sasl2.lua @ 5889:2597e2113561

mod_sasl2: Log when tls-exporter is NOT supported, as well as when it is
author Matthew Wild <mwild1@gmail.com>
date Wed, 17 Apr 2024 16:48:22 +0100
parents 6526b670e66d
children
comparison
equal deleted inserted replaced
5888:432efc39572f 5889:2597e2113561
63 log("debug", "Channel binding 'tls-unique' undefined in context of TLS 1.3"); 63 log("debug", "Channel binding 'tls-unique' undefined in context of TLS 1.3");
64 if tls_exporter(origin.conn) then 64 if tls_exporter(origin.conn) then
65 log("debug", "Channel binding 'tls-exporter' supported"); 65 log("debug", "Channel binding 'tls-exporter' supported");
66 sasl_handler:add_cb_handler("tls-exporter", sasl_tls_exporter); 66 sasl_handler:add_cb_handler("tls-exporter", sasl_tls_exporter);
67 channel_bindings:add("tls-exporter"); 67 channel_bindings:add("tls-exporter");
68 else
69 log("debug", "Channel binding 'tls-exporter' not supported");
68 end 70 end
69 elseif origin.conn.ssl_peerfinished and origin.conn:ssl_peerfinished() then 71 elseif origin.conn.ssl_peerfinished and origin.conn:ssl_peerfinished() then
70 log("debug", "Channel binding 'tls-unique' supported"); 72 log("debug", "Channel binding 'tls-unique' supported");
71 sasl_handler:add_cb_handler("tls-unique", tls_unique); 73 sasl_handler:add_cb_handler("tls-unique", tls_unique);
72 channel_bindings:add("tls-unique"); 74 channel_bindings:add("tls-unique");