From a3c6758bba936808b13532f615e853de949ec4a8 Mon Sep 17 00:00:00 2001
From: "psyc://psyced.org/~lynX" <@>
Date: Thu, 18 Nov 2010 13:08:16 +0100
Subject: [PATCH] fippo redo: don't offer an empty list of mechanisms

---
 world/net/jabber/gateway.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/world/net/jabber/gateway.c b/world/net/jabber/gateway.c
index 6301afe..2b4cfcd 100644
--- a/world/net/jabber/gateway.c
+++ b/world/net/jabber/gateway.c
@@ -530,7 +530,6 @@ open_stream(XMLNode node) {
 		packet += "<starttls xmlns='" NS_XMPP "xmpp-tls'/>";
 	    } else unless (mappingp(authhosts)) {
 # ifdef WANT_S2S_SASL
-		packet += "<mechanisms xmlns='" NS_XMPP "xmpp-sasl'>";
 		// if the other side did present a client certificate
 		// and we have verified it as X509_V_OK (0)
 		// we offer SASL external (authentication via name
@@ -545,11 +544,12 @@ open_stream(XMLNode node) {
 		    if (node["@from"] &&
 			    certificate_check_jabbername(node["@from"],
 						     certinfo)) {
+			packet += "<mechanisms xmlns='" NS_XMPP "xmpp-sasl'>";
 			packet += "<mechanism>EXTERNAL</mechanism>";
+			packet += "</mechanisms>";
 		    }
 		}
 #  endif
-		packet += "</mechanisms>";
 # endif
 	    }
 	}