nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-04-29 10:10:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

wireguard: Generate key pair

Browse Source 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
This commit is contained in:
James Valleroy 2019-09-12 19:15:18 -04:00
parent 966b179756
commit 87a58f1491
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808
1 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
actions/wireguard
View File

@ -21,6 +21,8 @@ Configuration helper for WireGuard.
import argparse import argparse
import json import json
import os
import pathlib
import subprocess import subprocess
PUBLIC_KEY_HELP = 'Public key for the client' PUBLIC_KEY_HELP = 'Public key for the client'
@ -62,12 +64,35 @@ def parse_arguments():
def subcommand_setup(_): def subcommand_setup(_):
"""Setup WireGuard.""" """Setup WireGuard."""
key_folder = pathlib.Path('/var/lib/freedombox/wireguard')
private_key_path = key_folder / 'privatekey'
public_key_path = key_folder / 'publickey'
# TODO: make idempotent
# create interface
subprocess.run( subprocess.run(
['ip', 'link', 'add', 'dev', SERVER_INTERFACE, 'type', 'wireguard'], ['ip', 'link', 'add', 'dev', SERVER_INTERFACE, 'type', 'wireguard'],
check=True) check=True)
# generate key pair
private_key = subprocess.check_output(['wg', 'genkey'])
public_key = subprocess.check_output(['wg', 'pubkey'], input=private_key)
key_folder.mkdir(parents=True, exist_ok=True)
with public_key_path.open(mode='wb') as public_key_file:
public_key_file.write(public_key)
old_umask = os.umask(0o077)
try:
with private_key_path.open(mode='wb') as private_key_file:
private_key_file.write(private_key)
finally:
os.umask(old_umask)
subprocess.run( subprocess.run(
['wg', 'set', SERVER_INTERFACE, 'listen-port', '51820'], check=True) ['wg', 'set', SERVER_INTERFACE, 'listen-port', '51820', 'private-key',
# TODO: generate key pair str(private_key_path)], check=True)
def subcommand_get_info(_): def subcommand_get_info(_):