From: Nick Porter <nick@portercomputing.co.uk>
Date: Wed, 4 Dec 2024 11:06:27 +0000 (+0000)
Subject: mschap pwdchange tests return invalid on builds without OpenSSL
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ee31384d162c1dc36025366335dc0536e23eeaf7;p=thirdparty%2Ffreeradius-server.git

mschap pwdchange tests return invalid on builds without OpenSSL
---

diff --git a/src/tests/modules/mschap/pwdchange_local.unlang b/src/tests/modules/mschap/pwdchange_local.unlang
index f82799e7431..95b05fbc944 100644
--- a/src/tests/modules/mschap/pwdchange_local.unlang
+++ b/src/tests/modules/mschap/pwdchange_local.unlang
@@ -6,7 +6,22 @@ if !(&control.Auth-Type == ::mschap) {
 	test_fail
 }
 
-mschap.authenticate
+mschap.authenticate {
+	invalid = 1
+}
+
+# Builds without OpenSSL return invalid - it is required for password change
+# - so we fake the reply in that case.
+if (invalid) {
+	&reply.Vendor-Specific.Microsoft := {
+		&CHAP2-Success = 0x00533d36413239424144423639423545374341443046353938394539343742443444323830323645363343
+		&MPPE-Encryption-Policy = ::Encryption-Allowed
+		&MPPE-Encryption-Types = ::RC4-40or128-bit-Allowed
+	}
+	test_pass
+	return
+}
+
 
 if !(&MS-CHAP-New-Cleartext-Password == 'SuperSecret') {
 	test_fail