login-common: Handle missing ssl_iostream in get_var_expand_table()

It can be missing during connection disconnection when connection
is lost uncleanly.

diff --git a/src/login-common/client-common.c b/src/login-common/client-common.c
index 0992a959cd9e928a28748c70fe4087d4a6bc9cad..b33c2d6883c9d4394aee4b40c0ea7697dc238cc7 100644 (file)
--- a/src/login-common/client-common.c
+++ b/src/login-common/client-common.c
@@ -891,7 +891,7 @@ get_var_expand_table(struct client *client)
        } else if (client->proxied_ssl) {
                tab[11].value = "TLS";
                tab[12].value = "(proxied)";
-       } else {
+       } else if (client->ssl_iostream != NULL) {
                const char *ssl_state =
                        ssl_iostream_is_handshaked(client->ssl_iostream) ?
                        "TLS" : "TLS handshaking";
@@ -902,6 +902,9 @@ get_var_expand_table(struct client *client)
                        t_strdup_printf("%s: %s", ssl_state, ssl_error);
                tab[12].value =
                        ssl_iostream_get_security_string(client->ssl_iostream);
+       } else {
+               tab[11].value = "TLS";
+               tab[12].value = "";
        }
        tab[13].value = client->mail_pid == 0 ? "" :
                dec2str(client->mail_pid);