Changeset 606 in code for trunk

Timestamp:

Oct 5, 2021, 5:21:43 PM (4 years ago)

Author:

contact

Message:

Add limit for RSA bits

File:

• trunk/service.go (modified) (2 diffs)

trunk/service.go

@@ -33 +33 @@
 const serviceRealname = "soju bouncer service"
 
+// maxRSABits is the maximum number of RSA key bits used when generating a new
+// private key.
+const maxRSABits = 8192
+
 var servicePrefix = &irc.Prefix{
         Name: serviceNick,
@@ -642 +646 @@
         switch *keyType {
         case "rsa":
+                if *bits <= 0 || *bits > maxRSABits {
+                        return fmt.Errorf("invalid value for -bits")
+                }
                 key, err := rsa.GenerateKey(rand.Reader, *bits)
                 if err != nil {