From: Alan T. DeKok <aland@freeradius.org>
Date: Fri, 21 Jul 2023 19:12:34 +0000 (-0400)
Subject: don't add Message-Authenticator for TLS connections
X-Git-Tag: release_3_2_4~204
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=aa705d01bf17437597fa969fe58b535b9badd230;p=thirdparty%2Ffreeradius-server.git

don't add Message-Authenticator for TLS connections

which by definition also matches RADIUSv11 connections
---

diff --git a/src/main/realms.c b/src/main/realms.c
index 83f7559bf0..33d999b651 100644
--- a/src/main/realms.c
+++ b/src/main/realms.c
@@ -2725,9 +2725,7 @@ void home_server_update_request(home_server_t *home, REQUEST *request)
 	 *	unless one already exists.
 	 */
 	if ((request->packet->code == PW_CODE_ACCESS_REQUEST) &&
-#ifdef WITH_RADIUSV11
-	    !request->proxy->radiusv11 &&
-#endif
+	    !home->tls &&
 	    !fr_pair_find_by_num(request->proxy->vps, PW_MESSAGE_AUTHENTICATOR, 0, TAG_ANY)) {
 		fr_pair_make(request->proxy, &request->proxy->vps,
 			 "Message-Authenticator", "0x00",