login-common: Pass SSL protocol details to auth

diff --git a/src/login-common/sasl-server.c b/src/login-common/sasl-server.c
index 34d9091bfebaa1d5d52e10149ef1c63df76f8c2d..e17ecfc142bcf853d6c32e0df910acd42d2cafb7 100644 (file)
--- a/src/login-common/sasl-server.c
+++ b/src/login-common/sasl-server.c
@@ -378,8 +378,14 @@ void sasl_server_auth_begin(struct client *client,
        info.session_id = client_get_session_id(client);
        if (client->client_cert_common_name != NULL)
                info.cert_username = client->client_cert_common_name;
-       else if (client->ssl_iostream != NULL)
+       else if (client->ssl_iostream != NULL) {
                info.cert_username = ssl_iostream_get_peer_name(client->ssl_iostream);
+               info.ssl_cipher = ssl_iostream_get_cipher(client->ssl_iostream,
+                                                        &info.ssl_cipher_bits);
+               info.ssl_pfs = ssl_iostream_get_pfs(client->ssl_iostream);
+               info.ssl_protocol =
+                       ssl_iostream_get_protocol_name(client->ssl_iostream);
+       }
        info.flags = client_get_auth_flags(client);
        info.local_ip = client->local_ip;
        info.remote_ip = client->ip;