From: Aki Tuomi <aki.tuomi@dovecot.fi>
Date: Mon, 11 Dec 2017 09:16:02 +0000 (+0200)
Subject: login-common: Pass SSL protocol details to auth
X-Git-Tag: 2.3.1~27
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b205e85191cf023000bb0fa12d81c30e1eec965f;p=thirdparty%2Fdovecot%2Fcore.git

login-common: Pass SSL protocol details to auth
---

diff --git a/src/login-common/sasl-server.c b/src/login-common/sasl-server.c
index 2b8c2dac76..ea6a995197 100644
--- a/src/login-common/sasl-server.c
+++ b/src/login-common/sasl-server.c
@@ -378,8 +378,14 @@ void sasl_server_auth_begin(struct client *client,
 	info.session_id = client_get_session_id(client);
 	if (client->client_cert_common_name != NULL)
 		info.cert_username = client->client_cert_common_name;
-	else if (client->ssl_iostream != NULL)
+	else if (client->ssl_iostream != NULL) {
 		info.cert_username = ssl_iostream_get_peer_name(client->ssl_iostream);
+		info.ssl_cipher = ssl_iostream_get_cipher(client->ssl_iostream,
+							 &info.ssl_cipher_bits);
+		info.ssl_pfs = ssl_iostream_get_pfs(client->ssl_iostream);
+		info.ssl_protocol =
+			ssl_iostream_get_protocol_name(client->ssl_iostream);
+	}
 	info.flags = client_get_auth_flags(client);
 	info.local_ip = client->local_ip;
 	info.remote_ip = client->ip;