Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a mechanism to pre-load keys and don't enable the API to add new ones #85

Open
awlx opened this issue Aug 22, 2022 · 2 comments
Open
Labels
enhancement New feature or request

Comments

@awlx
Copy link
Member

awlx commented Aug 22, 2022

This is a feature for @AiyionPrime and other communities who have a pre-approved list of keys and don't just want to accept any key.

The idea is, the broker loads a yaml file with a list of keys per domain from disc and allows only incoming nodes with a matching key. The list should be refreshed periodical or even better on-change.

@awlx awlx added the enhancement New feature or request label Aug 22, 2022
@T0biii
Copy link
Member

T0biii commented Mar 31, 2024

I tried to add this case:
main...T0biii:wgkex:add-preload
but now i am Stuck
maybe someone can do someting with it to make it work

@AiyionPrime
Copy link
Contributor

I doubt we'll ever use wgkex as whole, but am grateful for the effort nevertheless.
Thanks @awlx and @T0biii.

One thing I'd suggest conceptually is named keys, which will make redacting and working with the list a lot easier.
If one were opposed to the idea, one could keep the directory of single-line keyfiles, which do have a name, and generate the yaml using another helperscript.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants