diff options
author | Jason A. Donenfeld <Jason@zx2c4.com> | 2019-06-09 19:37:09 +0200 |
---|---|---|
committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2019-06-10 11:38:22 +0200 |
commit | bfac62b876588e442010242519036c75005f4bf5 (patch) | |
tree | f02e09e5da87e18daa014303b686e460a03010b8 /tunnel/service.go | |
parent | mod: bump wireguard-go (diff) | |
download | wireguard-windows-bfac62b876588e442010242519036c75005f4bf5.tar.xz wireguard-windows-bfac62b876588e442010242519036c75005f4bf5.zip |
tunnel: generate GUIDs deterministically
This allows NLA profiles to securely bind public keys to firewall
profiles, a considerable improvement on the usual insecure Windows
situation.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to '')
-rw-r--r-- | tunnel/service.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tunnel/service.go b/tunnel/service.go index 8a045aab..1978cae0 100644 --- a/tunnel/service.go +++ b/tunnel/service.go @@ -148,7 +148,7 @@ func (service *Service) Execute(args []string, r <-chan svc.ChangeRequest, chang } log.Println("Creating Wintun device") - wintun, err := tun.CreateTUN(conf.Name) + wintun, err := tun.CreateTUNWithRequestedGUID(conf.Name, deterministicGUID(conf)) if err != nil { serviceError = services.ErrorCreateWintun return |