[ANN] Announcing gemcert, a simple certificate generator
luna
luna at owlsne.st
Sat Jul 18 05:33:15 BST 2020
Glad to see that you released this! ^^
One suggestion I have is to implement an option to specify a limit for
the serial number's size. Generating a big.Int value that goes below the
threshold of 8 bits, 16 bits, etc. in size can help to save a few bytes.
Another suggestion is to have a confirmation prompt for overwriting
files. This is definitely a small detail, but considering the nature of
what's being generated, it might be worth making sure that a user
doesn't accidentally write over their private key.
Using the same domain name and expiration date, sizes of ed25519 certs
through gemcert seem to be a bit larger compared to what I get from a
certificate generator that I wrote a few days back (424 bytes versus 262
bytes) despite the x509 templates using the same basic values.
~luna
-- Email domain proudly hosted at https://migadu.com
More information about the Gemini
mailing list