01d00bc035
It's good to have SPDX identifiers in all files as the Linux kernel developers are working to add these identifiers to all files. Update all files with the correct SPDX license identifier based on the license text of the project or based on the license in the file itself. The SPDX identifier is a legally binding shorthand, which can be used instead of the full boiler plate text. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Modified-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
44 lines
1.3 KiB
Bash
Executable file
44 lines
1.3 KiB
Bash
Executable file
#!/bin/bash
|
|
# SPDX-License-Identifier: GPL-2.0
|
|
#
|
|
# Copyright (C) 2015-2017 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
|
|
|
|
set -e
|
|
shopt -s nocasematch
|
|
shopt -s extglob
|
|
export LC_ALL=C
|
|
|
|
CONFIG_FILE="$1"
|
|
[[ $CONFIG_FILE =~ ^[a-zA-Z0-9_=+.-]{1,16}$ ]] && CONFIG_FILE="/etc/wireguard/$CONFIG_FILE.conf"
|
|
[[ $CONFIG_FILE =~ /?([a-zA-Z0-9_=+.-]{1,16})\.conf$ ]]
|
|
INTERFACE="${BASH_REMATCH[1]}"
|
|
|
|
process_peer() {
|
|
[[ $PEER_SECTION -ne 1 || -z $PUBLIC_KEY || -z $ENDPOINT ]] && return 0
|
|
[[ $(wg show "$INTERFACE" latest-handshakes) =~ ^${PUBLIC_KEY//+/\\+}\ ([0-9]+)$ ]] || return 0
|
|
(( ($(date +%s) - ${BASH_REMATCH[1]}) > 135 )) || return 0
|
|
wg set "$INTERFACE" peer "$PUBLIC_KEY" endpoint "$ENDPOINT"
|
|
reset_peer_section
|
|
}
|
|
|
|
reset_peer_section() {
|
|
PEER_SECTION=0
|
|
PUBLIC_KEY=""
|
|
ENDPOINT=""
|
|
}
|
|
|
|
reset_peer_section
|
|
while read -r line || [[ -n $line ]]; do
|
|
key="${line%%=*}"; key="${key##*([[:space:]])}"; key="${key%%*([[:space:]])}"
|
|
value="${line#*=}"; value="${value##*([[:space:]])}"; value="${value%%*([[:space:]])}"
|
|
[[ $key == "["* ]] && { process_peer; reset_peer_section; }
|
|
[[ $key == "[Peer]" ]] && PEER_SECTION=1
|
|
if [[ $PEER_SECTION -eq 1 ]]; then
|
|
case "$key" in
|
|
PublicKey) PUBLIC_KEY="$value"; continue ;;
|
|
Endpoint) ENDPOINT="$value"; continue ;;
|
|
esac
|
|
fi
|
|
done < "$CONFIG_FILE"
|
|
process_peer
|