From: yasuoka <yasuoka@openbsd.org>
Date: Sun, 14 Jul 2024 11:12:32 +0000 (+0000)
Subject: Mistakenly the same challenge is used for testing CHAP.
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=7aed478bcee3012a6898733a2090c75808994cd5;p=openbsd

Mistakenly the same challenge is used for testing CHAP.
---

diff --git a/usr.sbin/radiusctl/radiusctl.c b/usr.sbin/radiusctl/radiusctl.c
index 8c46815c0de..9caaabe181a 100644
--- a/usr.sbin/radiusctl/radiusctl.c
+++ b/usr.sbin/radiusctl/radiusctl.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: radiusctl.c,v 1.9 2024/07/09 17:26:14 yasuoka Exp $	*/
+/*	$OpenBSD: radiusctl.c,v 1.10 2024/07/14 11:12:32 yasuoka Exp $	*/
 /*
  * Copyright (c) 2015 YASUOKA Masahiko <yasuoka@yasuoka.net>
  *
@@ -307,6 +307,7 @@ radius_test(struct parse_result *res)
 		u_char	 resp[1 + MD5_DIGEST_LENGTH]; /* "1 + " for CHAP Id */
 		MD5_CTX	 md5ctx;
 
+		arc4random_buf(chal, sizeof(chal));
 		arc4random_buf(resp, 1);	/* CHAP Id is random */
 		MD5Init(&md5ctx);
 		MD5Update(&md5ctx, resp, 1);