[ANN] Announcing gemcert, a simple certificate generator

luna luna at owlsne.st
Sat Jul 18 05:33:15 BST 2020


Glad to see that you released this! ^^

One suggestion I have is to implement an option to specify a limit for
the serial number's size. Generating a big.Int value that goes below the
threshold of 8 bits, 16 bits, etc. in size can help to save a few bytes.

Another suggestion is to have a confirmation prompt for overwriting
files. This is definitely a small detail, but considering the nature of
what's being generated, it might be worth making sure that a user
doesn't accidentally write over their private key.

Using the same domain name and expiration date, sizes of ed25519 certs
through gemcert seem to be a bit larger compared to what I get from a
certificate generator that I wrote a few days back (424 bytes versus 262
bytes) despite the x509 templates using the same basic values.

~luna

-- Email domain proudly hosted at https://migadu.com



More information about the Gemini mailing list