eapol_test: Move Message-Authenticator attribute to be the first one

Even if this is not strictly speaking necessary for mitigating certain
RADIUS protocol attacks, be consistent with the RADIUS server behavior
and move the Message-Authenticator attribute to be the first attribute
in the message from RADIUS client.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/wpa_supplicant/eapol_test.c b/wpa_supplicant/eapol_test.c
index 95953de928bd2e11ac679d55655c966ca69de68a..0c17aaea418ccff95df3745788b3b58969514a20 100644 (file)
--- a/wpa_supplicant/eapol_test.c
+++ b/wpa_supplicant/eapol_test.c
@@ -195,6 +195,9 @@ static void ieee802_1x_encapsulate_radius(struct eapol_test_data *e,
                return;
        }
 
+       if (!radius_msg_add_msg_auth(msg))
+               goto fail;
+
        radius_msg_make_authenticator(msg);
 
        hdr = (const struct eap_hdr *) eap;