From patchwork Sun Jan  5 09:10:08 2020
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: fastd: make secret key updatesafe
From: Christian Dresel <fff@chrisi01.de>
X-Patchwork-Id: 1253
Message-Id: <20200105091009.22443-1-fff@chrisi01.de>
To: franken-dev@freifunk.net
Date: Sun,  5 Jan 2020 10:10:08 +0100

To use a whitelist easy, it is neccessary to make the fastd key updatesafe
This patch safe the key to uci fff and recover it, if a key is after the update available

Signed-off-by: Christian Dresel <fff@chrisi01.de>
---
Changes in v2:
- use variable in if
- remove trailing whitespace
- remove -q
---
---
 .../fff/fff-fastd/files/etc/uci-defaults/55_fff-fastd         | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/packages/fff/fff-fastd/files/etc/uci-defaults/55_fff-fastd b/src/packages/fff/fff-fastd/files/etc/uci-defaults/55_fff-fastd
index d53eb43..4bfc316 100644
--- a/src/packages/fff/fff-fastd/files/etc/uci-defaults/55_fff-fastd
+++ b/src/packages/fff/fff-fastd/files/etc/uci-defaults/55_fff-fastd
@@ -15,9 +15,18 @@ uci batch <<EOF
   set fastd.fff.mtu='1426'
   set fastd.fff.on_up="/etc/fastd/fff/up.sh"
   set fastd.fff.secure_handshakes='0'
-  set fastd.fff.secret="generate"
 EOF
 
+if secretkey=$(uci -q get fff.fastd.secret); then
+	uci set fastd.fff.secret=$secretkey
+else
+	secret=$(/usr/bin/fastd --generate-key --machine-readable)
+	uci set fastd.fff.secret="$secret"
+	uci set fff.fastd='fff'
+	uci set fff.fastd.secret="$secret" && uci commit fff
+fi
+uci commit fastd
+
 [ ! -d /etc/fastd/fff ] &&  mkdir -p /etc/fastd/fff
 ln -s /tmp/fastd_fff_peers /etc/fastd/fff/peers
 echo "#!/bin/sh" > /etc/fastd/fff/up.sh