running wireguard company-wide?

[Jonathan Aquilina]

Hi all,

Just a long time follower of this list and very curious to try wireguard when I get the chance.

On a Mac you have a keychain where you can store keys passwords certs, is there a reason why wireguard cannot take advantage of the keychain functionality?

Regards,
Jonathan

-----Original Message-----
From: WireGuard <wireguard-bounces at lists.zx2c4.com> On Behalf Of Harald Dunkel
Sent: 16 June 2021 15:30
To: wireguard at lists.zx2c4.com
Subject: running wireguard company-wide?

Hi folks,

how can I bind the private key to a specific host, eg. an office Macbook? Esp on MacOS the private key is in plain sight in the wireguard GUI, making it easy to reuse it for other, unintended purposes.

For private installations this might be OK, but for a company-wide deployment this is a major headache.

Every helpful hint is highly appreciated Harri