diff options
| author |   Jason A. Donenfeld <Jason@zx2c4.com> | 2020-02-03 21:06:40 +0100 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2020-02-05 14:37:27 +0100 |
| commit | 44c4a3bb1946f875ce73497834928663eb37d5f9 (patch) | |
| tree | 11e8ca3a0fd85b19acbb32700d6f7b78d058bc56 | |
| parent | netns: tie socket waiting to target pid (diff) | |
| download | wireguard-linux-compat-44c4a3bb1946f875ce73497834928663eb37d5f9.tar.xz wireguard-linux-compat-44c4a3bb1946f875ce73497834928663eb37d5f9.zip | |
netns: ensure non-addition of peers with failed precomputation
Ensure that peers with low order points are ignored, both in the case
where we already have a device private key and in the case where we do
not. This adds points that naturally give a zero output.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| -rwxr-xr-x | src/tests/netns.sh | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/tests/netns.sh b/src/tests/netns.sh index 5c64279..315ccc4 100755 --- a/src/tests/netns.sh +++ b/src/tests/netns.sh @@ -518,6 +518,12 @@ n0 wg set wg0 peer "$pub2" allowed-ips 0.0.0.0/0,10.0.0.0/8,100.0.0.0/10,172.16. n0 wg set wg0 peer "$pub2" allowed-ips 0.0.0.0/0 n0 wg set wg0 peer "$pub2" allowed-ips ::/0,1700::/111,5000::/4,e000::/37,9000::/75 n0 wg set wg0 peer "$pub2" allowed-ips ::/0 +n0 wg set wg0 peer "$pub2" remove +low_order_points=( AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= 4Ot6fDtBuK4WVuP68Z/EatoJjeucMrH9hmIFFl9JuAA= X5yVvKNQjCSx0LFVnIPvWwREXMRYHI6G2CJO3dCfEVc= 7P///////////////////////////////////////38= 7f///////////////////////////////////////38= 7v///////////////////////////////////////38= ) +n0 wg set wg0 private-key /dev/null ${low_order_points[@]/#/peer } +[[ -z $(n0 wg show wg0 peers) ]] +n0 wg set wg0 private-key <(echo "$key1") ${low_order_points[@]/#/peer } +[[ -z $(n0 wg show wg0 peers) ]] ip0 link del wg0 declare -A objects |