[tech] Can I use existing ssh keys for gemini identity?

[Gary Johnson]

Chris McGee <newton688@gmail.com> writes:

> Does anyone know of a way to use my ssh RSA key-pairs as my identity for
> Gemini?

Hi Chris,

  Any Gemini capsule may choose to prompt your browser for a client
certificate. These can often be provided as either temporary or
permanent certs if your browser supports this feature. While many
browsers will auto-generate certs for you on the fly if requested, you
can also usually provide your own on a capsule by capsule basis.

If you want to use an existing certificate on your machine for one or
more Gemini capsules, you are free to do so. Just add them to your
browser's certificate collection.

Unfortunately, an SSH RSA key-pair isn't an X.509 SSL certificate, which
is what you need to give your Gemini browser. SSH produces/uses a public
key file and a private key file. For Gemini, you'll need a certificate
file (which contains the public key plus some ownership and signing
metadata) as well as a private key file.

I hope that helps.

Happy hacking,
  Gary

-- 
GPG Key ID: 7BC158ED
Use `gpg --search-keys lambdatronic' to find me
Protect yourself from surveillance: https://emailselfdefense.fsf.org
=======================================================================
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments

Why is HTML email a security nightmare? See https://useplaintext.email/

Please avoid sending me MS-Office attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html