Include connection security with the SASL host information.

See atheme/atheme@b41753f740 for more details.

1 files changed, 9 insertions, 0 deletions

diff --git a/src/modules/m_sasl.cpp b/src/modules/m_sasl.cpp
index 5afab9502..0ef93ec5a 100644
--- a/src/modules/m_sasl.cpp
+++ b/src/modules/m_sasl.cpp
@@ -99,6 +99,15 @@ class SaslAuthenticator
 		params.push_back(host);
 		params.push_back(ip);
 
+		LocalUser* lu = IS_LOCAL(user);
+		if (lu)
+		{
+			// NOTE: SaslAuthenticator instances are only created for local
+			// users so this parameter will always be appended.
+			SocketCertificateRequest req(&lu->eh, ServerInstance->Modules->Find("m_sasl.so"));
+			params.push_back(req.cert ? "S" : "P");
+		}
+
 		SendSASL(params);
 	}