nm: Enforce min. length for PSKs in backend

diff --git a/src/charon-nm/nm/nm_service.c b/src/charon-nm/nm/nm_service.c
index 5991c2465e33ff8010bf2d2de186e2f54b202ece..c0c78eff4d93a09af86b931408126fb9120b1bbe 100644 (file)
--- a/src/charon-nm/nm/nm_service.c
+++ b/src/charon-nm/nm/nm_service.c
@@ -428,6 +428,16 @@ static gboolean connect_(NMVPNPlugin *plugin, NMConnection *connection,
                {
                        user = identification_create_from_string((char*)str);
                        str = nm_setting_vpn_get_secret(vpn, "password");
+                       if (auth_class == AUTH_CLASS_PSK &&
+                               strlen(str) < 20)
+                       {
+                               g_set_error(err, NM_VPN_PLUGIN_ERROR,
+                                                       NM_VPN_PLUGIN_ERROR_BAD_ARGUMENTS,
+                                                       "pre-shared key is too short.");
+                               gateway->destroy(gateway);
+                               user->destroy(user);
+                               return FALSE;
+                       }
                        priv->creds->set_username_password(priv->creds, user, (char*)str);
                }
        }