From 4227a97278b26afb433c272b211c045b773e65b6 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Mon, 1 Oct 2018 19:57:35 +0200
Subject: [PATCH] net/wireguard: tighten base64 validation for #880

---
 .../src/opnsense/mvc/app/models/OPNsense/Wireguard/Client.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/net/wireguard/src/opnsense/mvc/app/models/OPNsense/Wireguard/Client.xml b/net/wireguard/src/opnsense/mvc/app/models/OPNsense/Wireguard/Client.xml
index 2aff08c5c..9b841a113 100644
--- a/net/wireguard/src/opnsense/mvc/app/models/OPNsense/Wireguard/Client.xml
+++ b/net/wireguard/src/opnsense/mvc/app/models/OPNsense/Wireguard/Client.xml
@@ -20,8 +20,8 @@
                 </pubkey>
                 <psk type="TextField">
                     <Required>N</Required>
-                    <mask>/^[a-z0-9\+\=\/]{44}$/i</mask>
-                    <ValidationMessage>Optional base64 string of 44 characters and ending with = like a public key. Allowed characters are 0-9a-zA-Z+/=</ValidationMessage>
+                    <mask>/^[a-zA-Z0-9+\/]{43}=$/</mask>
+                    <ValidationMessage>Should be a base64-encoded 32 byte string.</ValidationMessage>
                 </psk>
                 <tunneladdress type="NetworkField">
                     <default></default>