login-common: Pass SSL protocol details to auth

dovecot · Dec 28, 2017 · fe93257 · fe93257
1 parent 3609e0b
commit fe93257
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/login-common/sasl-server.c b/src/login-common/sasl-server.c
@@ -378,8 +378,14 @@ void sasl_server_auth_begin(struct client *client,
 	info.session_id = client_get_session_id(client);
 	if (client->client_cert_common_name != NULL)
 		info.cert_username = client->client_cert_common_name;
-	else if (client->ssl_iostream != NULL)
+	else if (client->ssl_iostream != NULL) {
 		info.cert_username = ssl_iostream_get_peer_name(client->ssl_iostream);
+		info.ssl_cipher = ssl_iostream_get_cipher(client->ssl_iostream,
+							 &info.ssl_cipher_bits);
+		info.ssl_pfs = ssl_iostream_get_pfs(client->ssl_iostream);
+		info.ssl_protocol =
+			ssl_iostream_get_protocol_name(client->ssl_iostream);
+	}
 	info.flags = client_get_auth_flags(client);
 	info.local_ip = client->local_ip;
 	info.remote_ip = client->ip;