EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacks

diff --git a/src/charon/plugins/eap_mschapv2/eap_mschapv2.c b/src/charon/plugins/eap_mschapv2/eap_mschapv2.c
index 71e313ae0b0e0852f24ab8071029c8ff7ebdfd4d..f0222840d083a0dbeca36caacae22c6793c99f7e 100644 (file)
--- a/src/charon/plugins/eap_mschapv2/eap_mschapv2.c
+++ b/src/charon/plugins/eap_mschapv2/eap_mschapv2.c
@@ -1152,7 +1152,7 @@ static status_t get_msk(private_eap_mschapv2_t *this, chunk_t *msk)
  */
 static bool is_mutual(private_eap_mschapv2_t *this)
 {
-       return TRUE;
+       return FALSE;
 }
 
 /**