nervuri
/
trust-stores
1
2
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Pre-generated trust stores for various Gemini clients
24 Commits 1 Branch 0 Tags 13 MiB
Shell 100%
Go to file
nervuri cebd820259
run 21 		2021-07-04 15:37:19 +03:00
agunua run 21 2021-07-04 15:37:19 +03:00
amfora run 21 2021-07-04 15:37:19 +03:00
certs run 21 2021-07-04 15:37:19 +03:00
lagrange run 21 2021-07-04 15:37:19 +03:00
.gitignore run 21 2021-07-04 15:37:19 +03:00
LICENSE.txt init 2021-04-28 12:20:10 +03:00
README.md run 13 2021-06-04 18:08:16 +03:00
cert-details.csv run 21 2021-07-04 15:37:19 +03:00
cert-details.md run 21 2021-07-04 15:37:19 +03:00
hosts run 21 2021-07-04 15:37:19 +03:00
log-stderr run 21 2021-07-04 15:37:19 +03:00
log-stdout run 21 2021-07-04 15:37:19 +03:00

README.md

Gemini Trust Stores

Geminispace is (currently) small enough that we can afford to download all known capsules' TLS certificates and use them to generate trust stores for various Gemini clients. If verified via multiple network perspectives, using a pre-generated trust store is a major improvement over blindly trusting-on-first-use.

This repo contains:

  1. All TLS certificates of capsules listed on geminispace.info and Lupa, updated every few days (no more than a week). This gives us a history of certificates in Geminispace, starting in 2021-04-27.
  2. A table containing details about each certificate (markdown and CSV).
  3. Trust stores for various Gemini clients, currently:

You can find instructions on how to use them in their respective directories.

The scripts used to generate these files are available here. The Tor option is used, so most certificates are attested to from at least two network perspectives.

All commits are signed with this GPG key (B769BD004A417E3A5A902DD1C4769EEA7BA61672).

You don't need to trust that I am publishing the correct certificates. The scripts should be easy to understand; I encourage you to run them yourselves and generate these files from your own network perspectives. If the results don't coincide with what I've published, please let me know.

How to contribute

The project is hosted at tildegit.org. If you don't want to make an account, just shoot me an email with your patch/suggestion/bug report/whatever else.