Differential D15093 Diff 45010 vpn/wireguard/wireguard.cpp

Changeset View

Standalone View

View Options

vpn/wireguard/wireguard.cpp

  • This file was added.
1​/*
2​ Copyright 2018 Bruce Anderson <banderson19com@san.rr.com>
3​
4​ This program is free software; you can redistribute it and/or
5​ modify it under the terms of the GNU General Public License as
6​ published by the Free Software Foundation; either version 2 of
7​ the License or (at your option) version 3 or any later version
8​ accepted by the membership of KDE e.V. (or its successor approved
9​ by the membership of KDE e.V.), which shall act as a proxy
10​ defined in Section 14 of version 3 of the license.
11​
12​ This program is distributed in the hope that it will be useful,
13​ but WITHOUT ANY WARRANTY; without even the implied warranty of
14​ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15​ GNU General Public License for more details.
16​
17​ You should have received a copy of the GNU General Public License
18​ along with this program. If not, see <http://www.gnu.org/licenses/>.
19​*/
20​
21​#include "wireguard.h"
22​
23​#include <QLatin1Char>
24​#include <QFileInfo>
25​#include <KPluginFactory>
26​#include <KConfig>
pinoUnsubmitted
Done

unused

pino: unused
27​#include <KConfigGroup>
28​
29​#include <NetworkManagerQt/Connection>
30​#include <NetworkManagerQt/VpnSetting>
31​#include <NetworkManagerQt/Ipv4Setting>
pinoUnsubmitted
Done

both unused

pino: both unused
32​
33​#include "wireguardwidget.h"
34​#include "wireguardauth.h"
35​#include "simpleipv4addressvalidator.h"
36​#include "simpleipv6addressvalidator.h"
37​#include "simpleiplistvalidator.h"
38​#include "wireguardkeyvalidator.h"
39​
40​#include "nm-wireguard-service.h"
41​
42​K_PLUGIN_FACTORY_WITH_JSON(WireGuardUiPluginFactory,
pinoUnsubmitted
Done

unused

pino: unused
43​ "plasmanetworkmanagement_wireguardui.json",
44​ registerPlugin<WireGuardUiPlugin>();)
45​
46​#define NMV_WG_TAG_INTERFACE "Interface"
47​#define NMV_WG_TAG_PRIVATE_KEY "PrivateKey"
48​#define NMV_WG_TAG_LISTEN_PORT "ListenPort"
49​#define NMV_WG_TAG_ADDRESS "Address"
50​#define NMV_WG_TAG_DNS "DNS"
51​#define NMV_WG_TAG_MTU "MTU"
52​#define NMV_WG_TAG_TABLE "Table"
53​#define NMV_WG_TAG_PRE_UP "PreUp"
54​#define NMV_WG_TAG_POST_UP "PostUp"
55​#define NMV_WG_TAG_PRE_DOWN "PreDown"
56​#define NMV_WG_TAG_POST_DOWN "PostDown"
57​#define NMV_WG_TAG_FWMARK "FwMark"
58​
59​#define NMV_WG_TAG_PEER "Peer"
60​#define NMV_WG_TAG_PUBLIC_KEY "PublicKey"
61​#define NMV_WG_TAG_ALLOWED_IPS "AllowedIPs"
pinoUnsubmitted
Done

unused

pino: unused
62​#define NMV_WG_TAG_ENDPOINT "Endpoint"
63​#define NMV_WG_TAG_PRESHARED_KEY "PresharedKey"
64​#define NMV_WG_TAG_PERSISTENT_KEEPALIVE "PersistentKeepalive"
65​
66​
67​WireGuardUiPlugin::WireGuardUiPlugin(QObject *parent, const QVariantList &) : VpnUiPlugin(parent)
68​{
69​}
70​
71​WireGuardUiPlugin::~WireGuardUiPlugin()
72​{
jgrulichUnsubmitted
Done

You can use simpleipv[4,6]validator we have in plasma-nm instead of using everything below. Or maybe QHostAddress can validate it for you?

jgrulich: You can use simpleipv[4,6]validator we have in plasma-nm instead of using everything below. Or…
andersonbruceAuthorUnsubmitted
Not Done

The problem with using the simpleipv[4,6]validator is that WireGuard requires that in some cases the IP address can include a CIDR at the end (e.g. 10.2.4.6/32) and in another case the entry needs to have a port number (e.g. 10.2.3.5:7642) and the simpleip* functions won't handle either of these as currently written. QHostAddress will handle the CIDR but not the port number version. Also I'm not really thrilled with how QHostAddress does its verification. I know that it is technically correct but my personal opinion is that "1/32" should not be accepted as a valid IPv4 address which QHostAddress does.

andersonbruce: The problem with using the simpleipv[4,6]validator is that WireGuard requires that in some…
73​}
74​
75​SettingWidget *WireGuardUiPlugin::widget(const NetworkManager::VpnSetting::Ptr &setting,
76​ QWidget *parent)
77​{
78​ return new WireGuardSettingWidget(setting, parent);
79​}
80​
81​SettingWidget *WireGuardUiPlugin::askUser(const NetworkManager::VpnSetting::Ptr &setting,
82​ QWidget *parent)
83​{
84​ return new WireGuardAuthWidget(setting, parent);
85​}
86​
87​QString WireGuardUiPlugin::suggestedFileName(const NetworkManager::ConnectionSettings::Ptr &connection) const
88​{
89​ return connection->id() + "_wireguard.conf";
90​}
91​
92​QString WireGuardUiPlugin::supportedFileExtensions() const
93​{
94​ return "*.conf";
95​}
96​
97​NMVariantMapMap WireGuardUiPlugin::importConnectionSettings(const QString &fileName)
98​{
99​ NMVariantMapMap result;
100​
101​ const KConfig importFile(fileName, KConfig::NoGlobals);
102​ const KConfigGroup interfaceGroup = importFile.group(NMV_WG_TAG_INTERFACE);
103​ const KConfigGroup peerGroup = importFile.group(NMV_WG_TAG_PEER);
104​
105​ // The config file must have both [Interface] and [Peer] sections
106​ if (!interfaceGroup.exists()
107​ || !peerGroup.exists()) {
108​ mError = VpnUiPlugin::Error;
109​ mErrorMessage = i18n("Config file needs both [Peer] and [Interface]");
110​ return result;
111​ }
112​
113​ const QString connectionName = QFileInfo(fileName).completeBaseName();
114​ NMStringMap dataMap;
115​ QVariantMap ipv4Data;
116​
117​ QString value;
118​ QStringList valueList;
119​ int intValue;
120​
pinoUnsubmitted
Done

isEmpty()

pino: isEmpty()
121​ // Do the required fields first and fail (i.e. return an empty result) if not present
122​
pinoUnsubmitted
Done

better use qt's foreach here:

Q_FOREACH (const QString &address, valueList)

and then using address instead of valueList[i]

pino: better use qt's foreach here: lang=c++ Q_FOREACH (const QString &address, valueList) and…
andersonbruceAuthorUnsubmitted
Not Done

Used plain 'for' instead because Nathaniel Graham commented that the Q_FOREACH is not acceptable anymore.

andersonbruce: Used plain 'for' instead because Nathaniel Graham commented that the Q_FOREACH is not…
123​ // Addresses
pinoUnsubmitted
Done

addressIn can be const

pino: addressIn can be const
124​ valueList = interfaceGroup.readEntry(NMV_WG_TAG_ADDRESS, QStringList());
125​ if (valueList.isEmpty()) {
126​ mError = VpnUiPlugin::Error;
127​ mErrorMessage = i18n("No address in config file");
128​ return result;
129​ }
130​
131​ for (const QString &address : valueList) {
132​ const QPair<QHostAddress, int> addressIn = QHostAddress::parseSubnet(address.trimmed());
133​ if (addressIn.first.protocol() == QAbstractSocket::NetworkLayerProtocol::IPv4Protocol) {
134​ dataMap.insert(QLatin1String(NM_WG_KEY_ADDR_IP4), address);
135​ } else if (addressIn.first.protocol() == QAbstractSocket::NetworkLayerProtocol::IPv6Protocol) {
136​ dataMap.insert(QLatin1String(NM_WG_KEY_ADDR_IP6), address);
pinoUnsubmitted
Done

the validation of a key is done multiple times, repeating the same regexp every time -- I'd be worth to create an own validator for it

pino: the validation of a key is done multiple times, repeating the same regexp every time -- I'd be…
137​ } else { // Error condition
138​ mError = VpnUiPlugin::Error;
139​ mErrorMessage = i18n("No valid address in config file");
140​ return result;
pinoUnsubmitted
Done

no need to specify this as parent, since it is on stack, and thus it will be deleted automatically

pino: no need to specify `this` as parent, since it is on stack, and thus it will be deleted…
141​ }
pinoUnsubmitted
Done

indent

pino: indent
142​ }
143​
144​ WireGuardKeyValidator keyValidator(nullptr);
145​ int pos = 0;
146​
147​ // Private Key
148​ value = interfaceGroup.readEntry(NMV_WG_TAG_PRIVATE_KEY);
149​ if (!value.isEmpty()) {
150​ if (keyValidator.validate(value, pos) == QValidator::State::Acceptable) {
151​ dataMap.insert(QLatin1String(NM_WG_KEY_PRIVATE_KEY), value);
152​ } else {
153​ mError = VpnUiPlugin::Error;
154​ mErrorMessage = i18n("No valid Private Key in config file");
pinoUnsubmitted
Done

extra ';'

pino: extra ';'
pinoUnsubmitted
Done

make all 3 as const, so it is clear they are read-only (and attempts to use writeEntry() will result in build failures)

pino: make all 3 as `const`, so it is clear they are read-only (and attempts to use writeEntry() will…
155​ return result;
156​ }
157​ } else {
158​ mError = VpnUiPlugin::Error;
159​ mErrorMessage = i18n("No Private Key in config file");
160​ return result;
pinoUnsubmitted
Done

"validator" is leaked here -- just use it on the stack (SimpleIpListValidator validator;)

pino: "validator" is leaked here -- just use it on the stack (`SimpleIpListValidator validator;`)
161​ }
162​
163​ // Public Key
164​ value = peerGroup.readEntry(NMV_WG_TAG_PUBLIC_KEY);
165​ if (!value.isEmpty()) {
166​ if (keyValidator.validate(value, pos) == QValidator::State::Acceptable) {
167​ dataMap.insert(QLatin1String(NM_WG_KEY_PUBLIC_KEY), value);
168​ } else {
169​ mError = VpnUiPlugin::Error;
pinoUnsubmitted
Done

You do not need to get the list of groups in the config file (twice): earlier you get the KConfigGroup objects for the groups, so checking eg interfaceGroup.exists() should do the job.

pino: You do not need to get the list of groups in the config file (twice): earlier you get the…
170​ mErrorMessage = i18n("No valid Public Key in config file");
171​ return result;
172​ }
173​ } else {
pinoUnsubmitted
Done

These checks can be moved right after reading the config file and getting the KConfigGroup objects.

pino: These checks can be moved right after reading the config file and getting the KConfigGroup…
174​ mError = VpnUiPlugin::Error;
175​ mErrorMessage = i18n("No Public Key in config file");
pinoUnsubmitted
Done

0 is int by default, so intValue must be int too (not quint32)

pino: `0` is `int` by default, so intValue must be int too (not quint32)
176​ return result;
177​ }
178​
pinoUnsubmitted
Done

since earlier there is a keyPos variable used for basically the same purpose (i.e. passing it to the validate() of validators), just move pos earlier in the function, and use one everywhere

pino: since earlier there is a `keyPos` variable used for basically the same purpose (i.e. passing it…
179​ // Allowed IPs
pinoUnsubmitted
Done

KConfig already supports comma-separated lists -- just pass QStringList() as default value to readEntry(), so KConfigGroup knows the value is a list.

pino: KConfig already supports comma-separated lists -- just pass QStringList() as `default` value to…
andersonbruceAuthorUnsubmitted
Not Done

The problem with using the KConfig method is if a space slips into the config file before or after the comma then the spaces are left in one or the other of the QStrings and I have to process each entry in the list to remove the spaces. The files can come from elsewhere, e.g. I have some provided by my VPN which have spaces in comma separated lists. Using split allows both operations to be performed at the same time.

andersonbruce: The problem with using the KConfig method is if a space slips into the config file before or…
pinoUnsubmitted
Done

This is what QString::trimmed() does already. Considering you are passing the string directly to QHostAddress, it is just easy to write

const QPair<QHostAddress, int> addressIn = QHostAddress::parseSubnet(addressList[i].trimmed());
pino: This is what `QString::trimmed()` does already. Considering you are passing the string directly…
180​ value = peerGroup.readEntry(NMV_WG_TAG_ALLOWED_IPS);
181​ if (!value.isEmpty()) {
182​ SimpleIpListValidator validator(this,
183​ SimpleIpListValidator::WithCidr,
184​ SimpleIpListValidator::Both);
185​
186​ if (validator.validate(value, pos) != QValidator::State::Invalid) {
jgrulichUnsubmitted
Done

Coding style.

jgrulich: Coding style.
pinoUnsubmitted
Done

const

pino: const
187​ dataMap.insert(QLatin1String(NM_WG_KEY_ALLOWED_IPS), value);
188​ } else {
189​ mError = VpnUiPlugin::Error;
190​ mErrorMessage = i18n("Invalid Allowed IP in config file");
jgrulichUnsubmitted
Done

You multiple times return just result, you should also set error message with the reason so users know why the import failed.

jgrulich: You multiple times return just result, you should also set error message with the reason so…
191​ return result;
192​ }
193​ } else {
194​ mError = VpnUiPlugin::Error;
195​ mErrorMessage = i18n("No Allowed IPs in config file");
196​ return result;
pinoUnsubmitted
Done

If you specify 0 as default parameter, KConfigGroup will try to decode the value as integer automatically. If 0 is a valid value for the port, then use -1.
After doing that, you do not need a validator anymore, just a manual range check will do the job.

pino: If you specify `0` as default parameter, KConfigGroup will try to decode the value as integer…
pinoUnsubmitted
Done

an MTU is not a port...

pino: an MTU is not a port...
197​ }
198​
199​ // Now the optional ones
200​
201​ // Listen Port
202​ intValue = interfaceGroup.readEntry(NMV_WG_TAG_LISTEN_PORT, 0);
203​ if (intValue > 0) {
204​ if (intValue < 65536) {
205​ dataMap.insert(QLatin1String(NM_WG_KEY_LISTEN_PORT), QString::number(intValue));
206​ } else {
207​ mError = VpnUiPlugin::Error;
208​ mErrorMessage = i18n("Invalid Listen Port in config file");
209​ return result;
210​ }
pinoUnsubmitted
Done

this validator is not needed, just use validatorRegex directly

pino: this validator is not needed, just use `validatorRegex` directly
211​ }
212​
213​ // DNS
214​ value = interfaceGroup.readEntry(NMV_WG_TAG_DNS);
215​ if (!value.isEmpty()) {
216​ const QHostAddress testAddress(value);
jgrulichUnsubmitted
Done

Coding style.

jgrulich: Coding style.
217​ if (testAddress.protocol() == QAbstractSocket::NetworkLayerProtocol::IPv4Protocol
218​ || testAddress.protocol() == QAbstractSocket::NetworkLayerProtocol::IPv6Protocol) {
219​ dataMap.insert(QLatin1String(NM_WG_KEY_DNS), value);
220​ } else {
221​ mError = VpnUiPlugin::Error;
222​ mErrorMessage = i18n("Invalid DNS in config file");
223​ return result;
224​ }
225​ }
226​
227​ // MTU
228​ intValue = interfaceGroup.readEntry(NMV_WG_TAG_MTU, 0);
229​ if (intValue > 0)
230​ dataMap.insert(QLatin1String(NM_WG_KEY_LISTEN_PORT), QString::number(intValue));
231​
232​ // Table
pinoUnsubmitted
Done

same as for the listen port: please read the value directly as integer.

pino: same as for the listen port: please read the value directly as integer.
233​ value = interfaceGroup.readEntry(NMV_WG_TAG_TABLE);
234​ if (!value.isEmpty())
235​ dataMap.insert(QLatin1String(NM_WG_KEY_TABLE), value);
236​
237​ // PreUp
238​ value = interfaceGroup.readEntry(NMV_WG_TAG_PRE_UP);
239​ if (!value.isEmpty())
240​ dataMap.insert(QLatin1String(NM_WG_KEY_PRE_UP), value);
pinoUnsubmitted
Done

if you move the dataMap declaration after vpnSettings, you can glue declaration and initialization together

pino: if you move the dataMap declaration after vpnSettings, you can glue declaration and…
241​
242​ // PostUp
243​ value = interfaceGroup.readEntry(NMV_WG_TAG_POST_UP);
244​ if (!value.isEmpty())
245​ dataMap.insert(QLatin1String(NM_WG_KEY_POST_UP), value);
246​
pinoUnsubmitted
Done

most probably this should be NM_WG_KEY_ADDR_IP6 (not again IP4)

pino: most probably this should be `NM_WG_KEY_ADDR_IP6` (not again IP4)
247​ // PreDown
248​ value = interfaceGroup.readEntry(NMV_WG_TAG_PRE_DOWN);
249​ if (!value.isEmpty())
250​ dataMap.insert(QLatin1String(NM_WG_KEY_PRE_DOWN), value);
251​
252​ // PostDown
253​ value = interfaceGroup.readEntry(NMV_WG_TAG_POST_DOWN);
254​ if (!value.isEmpty())
255​ dataMap.insert(QLatin1String(NM_WG_KEY_POST_DOWN), value);
256​
257​ // Endpoint
258​ value = peerGroup.readEntry(NMV_WG_TAG_ENDPOINT);
259​ if (!value.isEmpty())
260​ dataMap.insert(QLatin1String(NM_WG_KEY_ENDPOINT), value);
261​
262​ // Preshared Key
263​ value = peerGroup.readEntry(NMV_WG_TAG_PRESHARED_KEY);
264​ if (!value.isEmpty()) {
pinoUnsubmitted
Done

typos for IP6?

pino: typos for IP6?
265​ if (keyValidator.validate(value, pos) == QValidator::State::Acceptable) {
266​ dataMap.insert(QLatin1String(NM_WG_KEY_PRESHARED_KEY), value);
pinoUnsubmitted
Done

just like readEntry, writeEntry can output lists -- just create a QStringList, and pass it to writeEntry

pino: just like readEntry, writeEntry can output lists -- just create a QStringList, and pass it to…
267​ } else {
268​ mError = VpnUiPlugin::Error;
269​ mErrorMessage = i18n("Invalid Preshared Key in config file");
270​ return result;
271​ }
272​ }
pinoUnsubmitted
Done

as above, no need for a validator, just use the QRegExp directly

pino: as above, no need for a validator, just use the QRegExp directly
273​
274​ // Persistent Keepalive
275​ intValue = peerGroup.readEntry(NMV_WG_TAG_PERSISTENT_KEEPALIVE, -1);
276​ if (intValue > -1)
277​ dataMap.insert(QLatin1String(NM_WG_KEY_PERSISTENT_KEEPALIVE), QString::number(intValue));
278​
279​ NetworkManager::VpnSetting setting;
280​ setting.setServiceType(QLatin1String(NM_DBUS_SERVICE_WIREGUARD));
281​ setting.setData(dataMap);
282​
283​ QVariantMap conn;
284​ conn.insert("id", connectionName);
285​ conn.insert("type", "vpn");
286​ result.insert("connection", conn);
287​ result.insert("vpn", setting.toMap());
288​
289​ return result;
pinoUnsubmitted
Done

as above, no need for a validator, just use the QRegExp directly

pino: as above, no need for a validator, just use the QRegExp directly
290​}
291​
292​bool WireGuardUiPlugin::exportConnectionSettings(const NetworkManager::ConnectionSettings::Ptr &connection,
293​ const QString &fileName)
294​{
295​ NetworkManager::VpnSetting::Ptr vpnSetting = connection->setting(
296​ NetworkManager::Setting::Vpn).dynamicCast<NetworkManager::VpnSetting>();
297​ NMStringMap dataMap = vpnSetting->data();
298​
299​ // Make sure all the required fields are present
300​ if (!(dataMap.contains(QLatin1String(NM_WG_KEY_ADDR_IP4))
301​ || dataMap.contains(QLatin1String(NM_WG_KEY_ADDR_IP6)))
302​ || !dataMap.contains(QLatin1String(NM_WG_KEY_PRIVATE_KEY))
303​ || !dataMap.contains(QLatin1String(NM_WG_KEY_PUBLIC_KEY))
304​ || !dataMap.contains(QLatin1String(NM_WG_KEY_ALLOWED_IPS)))
305​ return false;
306​
307​ // Open the output file
pinoUnsubmitted
Done

as above, no need for a validator, just use the QRegExp directly

pino: as above, no need for a validator, just use the QRegExp directly
308​ KConfig exportFile(fileName, KConfig::NoGlobals);
309​ KConfigGroup interfaceGroup = exportFile.group(NMV_WG_TAG_INTERFACE);
310​ KConfigGroup peerGroup = exportFile.group(NMV_WG_TAG_PEER);
311​
312​ QStringList outputList;
313​
314​ if (dataMap.contains(QLatin1String(NM_WG_KEY_ADDR_IP4)))
315​ outputList.append(dataMap[NM_WG_KEY_ADDR_IP4]);
316​ if (dataMap.contains(QLatin1String(NM_WG_KEY_ADDR_IP6)))
317​ outputList.append(dataMap[NM_WG_KEY_ADDR_IP6]);
318​ interfaceGroup.writeEntry(NMV_WG_TAG_ADDRESS, outputList);
319​
jgrulichUnsubmitted
Done

Remove space.

jgrulich: Remove space.
320​ // Do Private Key
321​ interfaceGroup.writeEntry(NMV_WG_TAG_PRIVATE_KEY, dataMap[NM_WG_KEY_PRIVATE_KEY]);
322​
323​ // Do DNS (Not required)
324​ if (dataMap.contains(QLatin1String(NM_WG_KEY_DNS)))
325​ interfaceGroup.writeEntry(NMV_WG_TAG_DNS, dataMap[NM_WG_KEY_DNS]);
326​
327​ // Do MTU (Not required)
328​ if (dataMap.contains(QLatin1String(NM_WG_KEY_MTU)))
329​ interfaceGroup.writeEntry(NMV_WG_TAG_MTU, dataMap[NM_WG_KEY_MTU]);
330​
331​ // Do Table number (Not required)
332​ if (dataMap.contains(QLatin1String(NM_WG_KEY_TABLE)))
333​ interfaceGroup.writeEntry(NMV_WG_TAG_TABLE, dataMap[NM_WG_KEY_TABLE]);
334​
335​ // Do Listen Port (Not required)
336​ if (dataMap.contains(QLatin1String(NM_WG_KEY_LISTEN_PORT)))
337​ interfaceGroup.writeEntry(NMV_WG_TAG_LISTEN_PORT, dataMap[NM_WG_KEY_LISTEN_PORT]);
338​
339​ // Do FwMark (Not required)
340​ if (dataMap.contains(QLatin1String(NM_WG_KEY_FWMARK)))
341​ interfaceGroup.writeEntry(NMV_WG_TAG_FWMARK, dataMap[NM_WG_KEY_FWMARK]);
342​
343​ // Do PreUp (Not required)
344​ if (dataMap.contains(QLatin1String(NM_WG_KEY_PRE_UP)))
345​ interfaceGroup.writeEntry(NMV_WG_TAG_PRE_UP, dataMap[NM_WG_KEY_PRE_UP]);
346​
347​ // Do PostUp (Not required)
348​ if (dataMap.contains(QLatin1String(NM_WG_KEY_POST_UP)))
349​ interfaceGroup.writeEntry(NMV_WG_TAG_POST_UP, dataMap[NM_WG_KEY_POST_UP]);
350​
351​ // Do PreDown (Not required)
352​ if (dataMap.contains(QLatin1String(NM_WG_KEY_PRE_DOWN)))
353​ interfaceGroup.writeEntry(NMV_WG_TAG_PRE_DOWN, dataMap[NM_WG_KEY_PRE_DOWN]);
354​
pinoUnsubmitted
Done

as mentioned above: KConfigGroup supports lists

pino: as mentioned above: KConfigGroup supports lists
355​ // Do PostDown (Not required)
356​ if (dataMap.contains(QLatin1String(NM_WG_KEY_POST_DOWN)))
357​ interfaceGroup.writeEntry(NMV_WG_TAG_POST_DOWN, dataMap[NM_WG_KEY_POST_DOWN]);
358​
359​ // Do Pupblic key (required)
360​ peerGroup.writeEntry(NMV_WG_TAG_PUBLIC_KEY, dataMap[NM_WG_KEY_PUBLIC_KEY]);
361​
362​ // Do Allowed IP list (Required)
363​ peerGroup.writeEntry(NMV_WG_TAG_ALLOWED_IPS, dataMap[NM_WG_KEY_ALLOWED_IPS]);
364​
365​ // Do Endpoint (Not required)
366​ if (dataMap.contains(QLatin1String(NM_WG_KEY_ENDPOINT)))
pinoUnsubmitted
Done

this, just like all the other required keys, should be checked before even opening the output file

pino: this, just like all the other required keys, should be checked before even opening the output…
367​ peerGroup.writeEntry(NMV_WG_TAG_ENDPOINT, dataMap[NM_WG_KEY_ENDPOINT]);
368​
369​ // Do Preshared Key (Not required)
370​ if (dataMap.contains(QLatin1String(NM_WG_KEY_PRESHARED_KEY)))
371​ peerGroup.writeEntry(NMV_WG_TAG_PRESHARED_KEY, dataMap[NM_WG_KEY_PRESHARED_KEY]);
372​
373​ // Do Persistent Keepalive (Not required)
374​ if (dataMap.contains(QLatin1String(NM_WG_KEY_PERSISTENT_KEEPALIVE)))
375​ peerGroup.writeEntry(NMV_WG_TAG_PERSISTENT_KEEPALIVE, dataMap[NM_WG_KEY_PERSISTENT_KEEPALIVE]);
376​
377​ exportFile.sync();
378​ return true;
379​}
380​
381​#include "wireguard.moc"