adds length check for opaque key

inverse-inc · Dec 17, 2024 · a2c7cc6 · a2c7cc6
1 parent fd0b0d7
commit a2c7cc6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/html/pfappserver/lib/pfappserver/Form/Config/Radiusd/TeapProfile.pm b/html/pfappserver/lib/pfappserver/Form/Config/Radiusd/TeapProfile.pm
@@ -40,10 +40,10 @@ has_field 'pac_opaque_key' => (
     type     => 'Text',
     apply    => [
         {
-            check   => sub { $_[0] =~ /^[0-9a-fA-F]+$/ },
+            check   => sub { $_[0] =~ /^[0-9a-fA-F]{32}$/ },
             message => sub {
                 my ( $value, $field ) = @_;
-                return $field->name . " must be hexadecimal";
+                return $field->name . " must be 32-chars hexadecimal. e.g., openssl rand -hex 32";
             },
         }
     ]