[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [MirageOS-devel] csrs and self-signed certs for TLS

> On 12 Jun 2015, at 11:32, Hannes Mehnert <hannes@xxxxxxxxxxx> wrote:
> Hash: SHA384
> Hey,
> On 06/12/2015 10:10, Mindy wrote:
>> We don't have a nice way to generate certificate signing requests 
>> or self-signed certificates ourselves yet, right?  I'm writing up
>> a thing on getting HTTPS up and running with mirage-seal and those 
>> are places where I have to say "invoke openssl or your favorite 
>> alternative, but we got nothin' for you".
>> If I'm incorrect, I'd appreciate a pointer on where to go looking. 
>> :)
> It is currently not possible to generate certificate signing requests
> (as defined in PKCS10), but generation of self-signed certificates is
> possible (not in released X.509, only on master):
> https://github.com/mirleft/ocaml-x509/blob/master/lib/x509.mli#L117-L140
> I'll try to add generation of CSRs to X.509 this weekend.

That would be great.  Would this be available via the command line?

Please do let us know when itâs ready and we can update the instructions.

MirageOS-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.