Merge pull request #11693 from vegaprotocol/feature/add-tendermint-pu…

…bkey-validation-on-import

feat: add validation when loading tendermint pubkey

cmd/vega/commands/nodewallet/import.go

@@ -16,6 +16,7 @@
 package nodewallet
 
 import (
+	"encoding/base64"
 	"encoding/json"
 	"errors"
 	"fmt"
@@ -137,6 +138,12 @@ func (opts *importCmd) Execute(_ []string) error {
 			}
 		}
 
+		// validate the key is base64
+		_, err := base64.StdEncoding.DecodeString(tendermintPubkey)
+		if err != nil {
+			return fmt.Errorf("tendermint pubkey must be base64 encoded: %w", err)
+		}
+
 		data, err = nodewallets.ImportTendermintPubkey(vegaPaths, registryPass, tendermintPubkey, opts.Force)
 		if err != nil {
 			return fmt.Errorf("couldn't import Tendermint pubkey: %w", err)