diff --git a/freeradius-server-3.2.3.tar.gz b/freeradius-server-3.2.5.tar.gz
similarity index 42%
rename from freeradius-server-3.2.3.tar.gz
rename to freeradius-server-3.2.5.tar.gz
index 44bee8c2b3725a995eedf79d98e272d1fb5873f0..691c910ee478c3f37127a1f41e2f18e8badafab3 100644
Binary files a/freeradius-server-3.2.3.tar.gz and b/freeradius-server-3.2.5.tar.gz differ
diff --git a/freeradius.spec b/freeradius.spec
index 80e34014bc8152517c95f8c87f064e9191a5c7ba..a336110ae065275981c4e17174f20381231fc080 100644
--- a/freeradius.spec
+++ b/freeradius.spec
@@ -3,8 +3,8 @@
 %define perl_version %(eval "`%{__perl} -V:version`"; echo $version)
 
 Name:           freeradius
-Version:        3.2.3
-Release:        2
+Version:        3.2.5
+Release:        1
 Summary:        Remote Authentication Dial-In User Service
 
 License:        GPLv2+ and LGPLv2+
@@ -243,6 +243,7 @@ exit 0
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/certs/*.cnf
 %attr(750,root,radiusd) /etc/raddb/certs/{bootstrap}
 /etc/raddb/certs/README.md
+/etc/raddb/certs/realms/README.md
 %exclude /etc/raddb/certs/{*.crt,*.crl,*.csr,*.der,*.key,*.pem,*.p12}
 %exclude /etc/raddb/certs/{index.*,serial*,dh,random}
 
@@ -307,6 +308,7 @@ exit 0
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{utf8,wimax,yubikey}
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{dhcp_files,dhcp_passwd,dhcp_sql,sql_map,totp} 
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/json
+%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/dpsk
 %exclude /etc/raddb/mods-available/{unbound,couchbase,abfab*,moonshot-targeted-ids}
 
 # /etc/raddb/mods-enabled dir
@@ -352,6 +354,8 @@ exit 0
 %{_libdir}/freeradius/{rlm_unix.so,rlm_unpack.so,rlm_utf8.so,rlm_wimax.so,rlm_yubikey.so}
 %{_libdir}/freeradius/{rlm_sql_map.so,rlm_totp.so}
 %{_libdir}/freeradius/rlm_json.so
+%{_libdir}/freeradius/rlm_dpsk.so
+%{_libdir}/freeradius/rlm_eap_teap.so
 %exclude %{_libdir}/freeradius/{*.a,*.la,rlm_test.so}
 
 # MIB files
@@ -449,15 +453,15 @@ exit 0
 %dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/mysql
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/*
 
-%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/mysql/extras	
-%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/extras/wimax/*
+#%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/mysql/extras	
+#%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/extras/wimax/*
 
 %dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/ndb
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/ndb/{setup.sql,schema.sql}
 
 %files postgresql
 %{_libdir}/freeradius/rlm_sql_postgresql.so
-%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/counter/postgresql
+#%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/counter/postgresql
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/postgresql/*
 
 %dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/cui/postgresql
@@ -470,8 +474,8 @@ exit 0
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/*
 
 	
-%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/postgresql/extras	
-%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/extras/*
+#%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/postgresql/extras	
+#%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/extras/*
 %{_libdir}/freeradius/rlm_sql_postgresql.so 
 
 %files sqlite
@@ -496,6 +500,14 @@ exit 0
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/ldap
 
 %changelog
+* Thu Jul 11 2024 zhangxingrong-<zhangxingrong@uniontech.cn> - 3.2.5-1
+- update to version 3.2.5
+  - Allow proxying by pool / home server name to work with auth+acct servers.
+  - Fix OpenSSL API usage which sometimes caused crash in MS-CHAP Previously it would either always crash immediately, or never crash.
+  - Fix packet statistics. Stop double counting some packets, and track packet statistics even if a socket is closed.
+  - Reverted patch in TTLS which broke compatibility with some systems.
+  - Don't crash in debug mode when multiple intermediate certs are used Patch from Alexander Chernikov.
+
 * Tue Mar 12 2024 yaoxin <yao_xin001@hoperun.com> - 3.2.3-2
 - Remove pcre-devel dependency