<feed xmlns='http://www.w3.org/2005/Atom'>
<title>veeos-1x.git/src/validators/base64, branch current</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos-contrib/veeos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos-contrib/veeos-1x.git/atom?h=current</id>
<link rel='self' href='https://git.amelek.net/vyos-contrib/veeos-1x.git/atom?h=current'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos-contrib/veeos-1x.git/'/>
<updated>2025-03-20T21:00:10+00:00</updated>
<entry>
<title>wireguard: T7246: verify Base64 encoded 32byte boundary on keys</title>
<updated>2025-03-20T21:00:10+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2025-03-20T21:00:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos-contrib/veeos-1x.git/commit/?id=8021bdd62e4142caf4a5e82000c8ca3da99fcae4'/>
<id>urn:sha1:8021bdd62e4142caf4a5e82000c8ca3da99fcae4</id>
<content type='text'>
Not 31 bytes or 33 bytes, but exactly 32. This matters, because 32 does not
divide evenly by .75, so there's a padding character and the penultimate
character does not include the whole base64 alphabet.

Extend the base64 validator with an optional argument to define the length
to match of the decrypted Base64 encoded string.

Source: https://lists.zx2c4.com/pipermail/wireguard/2020-December/006222.html
</content>
</entry>
<entry>
<title>ssh: T3789: add custom validator for base64 encoded CLI data</title>
<updated>2021-08-31T10:20:05+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2021-08-31T10:20:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos-contrib/veeos-1x.git/commit/?id=00efce716912680354d47a2dca9769cd8c5c89ae'/>
<id>urn:sha1:00efce716912680354d47a2dca9769cd8c5c89ae</id>
<content type='text'>
SSH keys used for remote login are supplied as base64 encoded data on the CLI.
The key is not validated, thus an invalid copy/pasted key will render the login
useless. This commit adds a custom and re-usable validator which check if the
data is properly base64 encoded.
</content>
</entry>
</feed>
