mirror/labs-bird
1
0
Fork 0
mirror of https://gitlab.labs.nic.cz/labs/bird.git synced 2024-05-11 16:54:54 +00:00
Code Releases Activity

Nest: Allow MAC algorithms to specify min/max key length

Browse Source 
Add min/max key length fields to the MAC algorithm description and
validate configured keys before they are used.
This commit is contained in:
Toke Høiland-Jørgensen
2021-04-15 04:38:49 +02:00
committed by Ondrej Zajicek (work)
parent 35f88b305a
commit 589f7d1e4f
5 changed files with 37 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
nest/password.c
View File

@@ -9,6 +9,7 @@
#include "nest/bird.h"
#include "nest/password.h"
#include "conf/conf.h"
#include "lib/string.h"
#include "lib/timer.h"
#include "lib/mac.h"
@@ -85,3 +86,28 @@ max_mac_length(list *l)
return val;
}
/**
* password_validate_length - enforce key length restrictions
* @pi: Password item
*
* This is a common MAC algorithm validation function that will enforce that the
* key length constrains specified in the MAC type table.
*/
void
password_validate_length(const struct password_item *pi)
{
if (!pi->alg)
return;
const struct mac_desc *alg = &mac_table[pi->alg];
if (alg->min_key_length && (pi->length < alg->min_key_length))
cf_error("Key length (%u B) below minimum length of %u B for %s",
pi->length, alg->min_key_length, alg->name);
if (alg->max_key_length && (pi->length > alg->max_key_length))
cf_error("Key length (%u B) exceeds maximum length of %u B for %s",
pi->length, alg->max_key_length, alg->name);
}