don't include trailing 0

diff --git a/src/modules/proto_radius/proto_radius_udp.c b/src/modules/proto_radius/proto_radius_udp.c
index 824f48c75bf85e4cde2aaf2ae5709e32f4fbc615..99a928c0f6daeb26373faea1bb6290144d423ac4 100644 (file)
--- a/src/modules/proto_radius/proto_radius_udp.c
+++ b/src/modules/proto_radius/proto_radius_udp.c
@@ -324,8 +324,8 @@ static ssize_t mod_read(void *instance, void **packet_ctx, fr_time_t **recv_time
         */
        if (fr_radius_verify(buffer, NULL,
                             (uint8_t const *)address.client->secret,
-                            talloc_array_length(address.client->secret)) < 0) {
-               DEBUG2("proto_radius_udp packet failed verification");
+                            talloc_array_length(address.client->secret) - 1) < 0) {
+               DEBUG2("proto_radius_udp packet failed verification: %s", fr_strerror());
                inst->stats.total_bad_authenticators++;
                return 0;
        }