diff options
| author | Toke Høiland-Jørgensen <toke@toke.dk> | 2021-04-15 04:38:49 +0200 |
|---|---|---|
| committer | Ondrej Zajicek (work) <santiago@crfreenet.org> | 2021-06-06 16:28:18 +0200 |
| commit | 589f7d1e4f3aaca3fec6c38474bb962a9c578ebe (patch) | |
| tree | 8c7ed1d80769f9fea6a1189c5577eebf24dbc460 /nest/config.Y | |
| parent | 35f88b305ab6a0e27b5ff1b445f63f544986e14e (diff) | |
Nest: Allow MAC algorithms to specify min/max key length
Add min/max key length fields to the MAC algorithm description and
validate configured keys before they are used.
Diffstat (limited to 'nest/config.Y')
| -rw-r--r-- | nest/config.Y | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/nest/config.Y b/nest/config.Y index 8bd89de0..45d18679 100644 --- a/nest/config.Y +++ b/nest/config.Y @@ -504,8 +504,8 @@ password_items: ; password_item: - password_item_begin '{' password_item_params '}' - | password_item_begin + password_item_begin '{' password_item_params '}' password_item_end + | password_item_begin password_item_end ; password_item_begin: @@ -542,6 +542,11 @@ password_algorithm: | BLAKE2B512 { $$ = ALG_BLAKE2B_512; } ; +password_item_end: +{ + password_validate_length(this_p_item); +}; + /* BFD options */ |