TLS certificate sizes in Geminispace

Petite Abeille petite.abeille at gmail.com
Fri Jun 26 15:07:28 BST 2020



> On Jun 26, 2020, at 15:56, solderpunk <solderpunk at SDF.ORG> wrote:
> 
> Unfortunately making this kind of cert with the `openssl` tool is not
> as straightforward as other options.

Does anyone have a reasonable recipe for openssl?

Stumbled upon this:

Create ED25519 certificates for TLS with OpenSSL
https://blog.pinterjann.is/ed25519-certificates.html

Is that a reasonable approach? Or?

>  The standard library for Go seems
> up to the task.  I will write a small and simple bulletproof program to
> generate these certs next week, and document it well.  It will be handy
> not only for server admins but people who want to generate their own
> client certs for use with clients like Alphonse.  Stay tund...
> 

Looking forward to it.


More information about the Gemini mailing list