warn on short shared secrets

diff --git a/src/main/client.c b/src/main/client.c
index 6e89fafc16a217964e6a783dc16e68e43e3b4149..6e1a684da6a8ac5d6ef9e3fe65c2768e37e9507d 100644 (file)
--- a/src/main/client.c
+++ b/src/main/client.c
@@ -1216,6 +1216,14 @@ done_coa:
                }
        }
 
+       /*
+        *      Be annoying to people, but it's about security.
+        */
+       if (strlen(c->secret) < 12) {
+               WARN("Shared secret for client %s is short, and likely can be broken by an attacker.",
+                    c->shortname);
+       }
+
        return c;
 }