Start9/start-os
2
0
Fork 0
mirror of https://github.com/Start9Labs/start-os.git synced 2026-03-26 02:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

overwrite AllowedIPs in wg config (#3055)

Browse Source 
mute UnknownCA errors
This commit is contained in:
Aiden McClelland
2025-11-21 11:30:21 -07:00
committed by GitHub
parent 66188d791b
commit 6e8a425eb1
2 changed files with 27 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
core/startos/src/net/tls.rs
View File

@@ -217,10 +217,15 @@ where
.write_all(&buffered)
.await
.with_kind(ErrorKind::Network)?;
return Ok(Some((
metadata,
Box::pin(mid.into_stream(Arc::new(cfg)).await?) as AcceptStream,
)));
let stream = match mid.into_stream(Arc::new(cfg)).await {
Ok(stream) => Box::pin(stream) as AcceptStream,
Err(e) => {
tracing::trace!("Error completing TLS handshake: {e}");
tracing::trace!("{e:?}");
return Ok(None);
}
};
return Ok(Some((metadata, stream)));
}
Ok(None)

19
core/startos/src/net/tunnel.rs
View File

@@ -39,6 +39,23 @@ pub struct AddTunnelParams {
public: bool,
}
fn sanitize_config(config: &str) -> String {
let mut res = String::with_capacity(config.len());
for line in config.lines() {
if line
.trim()
.strip_prefix("AllowedIPs")
.map_or(false, |l| l.trim().starts_with("="))
{
res.push_str("AllowedIPs = 0.0.0.0/0, ::/0");
} else {
res.push_str(line);
}
res.push('\n');
}
res
}
pub async fn add_tunnel(
ctx: RpcContext,
AddTunnelParams {
@@ -86,7 +103,7 @@ pub async fn add_tunnel(
let tmpdir = TmpDir::new().await?;
let conf = tmpdir.join(&iface).with_extension("conf");
write_file_atomic(&conf, &config).await?;
write_file_atomic(&conf, &sanitize_config(&config)).await?;
Command::new("nmcli")
.arg("connection")
.arg("import")