typo

diff --git a/src/protocols/tacacs/encode.c b/src/protocols/tacacs/encode.c
index 0de445005310562f98cb1e86e418eb9dfec3fc89..268c3aaea2c4d173eccc564adb738440af036f6a 100644 (file)
--- a/src/protocols/tacacs/encode.c
+++ b/src/protocols/tacacs/encode.c
@@ -735,7 +735,7 @@ ssize_t fr_tacacs_encode(fr_dbuff_t *dbuff, uint8_t const *original_packet, char
        /*
         *      Packets which have no secret cannot be encrypted.
         */
-       if (!secret) packet->hdr.flags = packet->hdr.flags & ~FR_TAC_PLUS_UNENCRYPTED_FLAG;
+       if (!secret) packet->hdr.flags = packet->hdr.flags |= FR_TAC_PLUS_UNENCRYPTED_FLAG;
 
 #ifndef NDEBUG
        if (fr_debug_lvl >= L_DBG_LVL_4) {
@@ -753,9 +753,6 @@ ssize_t fr_tacacs_encode(fr_dbuff_t *dbuff, uint8_t const *original_packet, char
         *      Packets are encrypted if the unencrypted flag is clear.
         */
        if ((packet->hdr.flags & FR_TAC_PLUS_UNENCRYPTED_FLAG) == 0) {
-               fr_assert(secret != NULL);
-               fr_assert(secret_len > 0);
-
                if (!secret || secret_len < 1) {
                        fr_strerror_const("decode: Packet is supposed to be encrypted, but no secret is set.");
                        return -1;