As a user I would like to be able to send a client certificate when requested by gemini servers #42

New Issue

sloum · 2019-10-01T03:28:47Z

sloum commented

2019-10-01 03:28:47 +00:00

Status code 6 is a request for a client certificate. I am inclined to set it up as follows:

Create a config option to point to a client certificate for use as a permanent or long term certificate.
On startup Bombadillo creates a new certificate to be used for the session.
When a client certificate is requested the user is asked which they would like to use (if both exist, otherwise it will automatically use the trnsient/session certificate).

Does this sound like a reasonable way to go? Or is generating certificates for a little used/new protocol too heavy a thing to be doing as part of the initialization? Should we just give users the option to point to a file in their config and call it a day?

Status code 6 is a request for a client certificate. I am inclined to set it up as follows: 1. Create a config option to point to a client certificate for use as a permanent or long term certificate. 2. On startup Bombadillo creates a new certificate to be used for the session. 3. When a client certificate is requested the user is asked which they would like to use (if both exist, otherwise it will automatically use the trnsient/session certificate). Does this sound like a reasonable way to go? Or is generating certificates for a little used/new protocol too heavy a thing to be doing as part of the initialization? Should we just give users the option to point to a file in their config and call it a day?

sloum added the

enhancement

label 2019-10-01 04:06:31 +00:00

sloum commented

2019-10-09 15:54:05 +00:00

This is closed by #44

Adds the ability for a client to add paths to their config for a key and cert. This will get sent automatically if the client requests a certificate. This behavior is not strictly in-line with the current spec and will need review as the spec matures and things are settled upon.

This is closed by https://tildegit.org/sloum/bombadillo/pulls/44 Adds the ability for a client to add paths to their config for a key and cert. This will get sent automatically if the client requests a certificate. This behavior is not strictly in-line with the current spec and will need review as the spec matures and things are settled upon.

sloum closed this issue

2019-10-09 15:54:05 +00:00

Sign in to join this conversation.