summaryrefslogtreecommitdiff
path: root/interface-definitions/include/constraint/wireguard-keys.xml.i
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2025-03-20 22:05:04 +0100
committerGitHub <noreply@github.com>2025-03-20 22:05:04 +0100
commitf2d427bd6b2a2a39d6eb086dd0abdfa099b78cdd (patch)
tree89fa2eb4d29ed11892934ae8fc859a011f55cd94 /interface-definitions/include/constraint/wireguard-keys.xml.i
parent7eec4583bf7feb900fad02e009b9ded11b52fd5d (diff)
parent8021bdd62e4142caf4a5e82000c8ca3da99fcae4 (diff)
downloadvyos-1x-f2d427bd6b2a2a39d6eb086dd0abdfa099b78cdd.tar.gz
vyos-1x-f2d427bd6b2a2a39d6eb086dd0abdfa099b78cdd.zip
Merge pull request #4402 from c-po/wireguard-key-T7246
wireguard: T7246: verify Base64 encoded 32byte boundary on keys
Diffstat (limited to 'interface-definitions/include/constraint/wireguard-keys.xml.i')
-rw-r--r--interface-definitions/include/constraint/wireguard-keys.xml.i6
1 files changed, 6 insertions, 0 deletions
diff --git a/interface-definitions/include/constraint/wireguard-keys.xml.i b/interface-definitions/include/constraint/wireguard-keys.xml.i
new file mode 100644
index 000000000..f59c86087
--- /dev/null
+++ b/interface-definitions/include/constraint/wireguard-keys.xml.i
@@ -0,0 +1,6 @@
+<!-- include start from constraint/wireguard-keys.xml.i -->
+<constraint>
+ <validator name="base64" argument="--decoded-len 32"/>
+</constraint>
+<constraintErrorMessage>Key must be Base64-encoded with 32 bytes in length</constraintErrorMessage>
+<!-- include end -->