Do not verify response message authenticator for Status-Server requests

Ignacio Arces · Ignacio Arces · commit 039052732425 · 2020-05-19T15:42:34.000-05:00
diff --git a/lib/radius.js b/lib/radius.js
@@ -406,6 +406,10 @@ Radius.verify_response = function(args) {
     return false;
   }
 
+  // Response packets for `Status-Server` requests do not have a `Message-Authenticator` attribute hence
+  // no need to verify response message authenticator
+  if (packet.code === `Status-Server`) return true;
+
   return this._verify_response_message_authenticator(args);
 };
 

Original file line number	Diff line number	Diff line change
`@@ -406,6 +406,10 @@ Radius.verify_response = function(args) {`
`406`	`406`	`return false;`
`407`	`407`	`}`
`408`	`408`
	`409`	+ // Response packets for `Status-Server` requests do not have a `Message-Authenticator` attribute hence
	`410`	`+ // no need to verify response message authenticator`
	`411`	+ if (packet.code === `Status-Server`) return true;
	`412`	`+`
`409`	`413`	`return this._verify_response_message_authenticator(args);`
`410`	`414`	`};`
`411`	`415`