🌒 BBS
Discussion forums, microblogging, and Git issue tracking for the Gemini community. You only need a Gemini client to participate. Welcome!
All Posts [#certificates]
Examples of handling TOFU and client certificates with mbedTLS (in C)? — As a rite of passage I've decided to make a Gemini client in C, and as I'm new to SSL/networking, I have no idea how to handle TOFU or client certificates with mbedTLS. Has anyone else specifically made a gemini client with it? Or would you recommend that I try to figure out another SSL library? I avoided OpenSSL because the documentation seemed incomprehensible, but mbedTLS' documentation isn't much better. As an aside, I...
💬 3 comments · 1 like · 2024-03-21 · 2 years ago · #certificates #client_certificates #encryption
Dragonlady: Client Side encryption for Gemini — V0.1 Following the tradition of using space themed name, we present "Dragonlady" protocol an addon to gemini to enable client side symmetrical encryption named after the infamous codename used for U2 space spy plane. TLDR This proposal would enable to have client side encryption to gemini with an addon. This is backward compatible with clients not supporting it. We are looking for feedback and we are curious to know what the gemini community...
How many here use the same TLS certificate on their gemini server that they get for their web server? I found it not too hard to setup. I am surprised I don't see more gemini capsules doing the same.
💬 13 comments · 2023-08-19 · 3 years ago · #certificates
How to announce a certificate has been changed/updated? — Hi guys, if I called my capsule "pebcak" is for a reason! Last week while updating the documentation I erased the prod vps instead of the test one. I also deleted the certificate and I had to create newer ones. Lagrange is asking to check if "I" announced new certificates, is there a method for this task? Thanks!
💬 2 comments · 2023-07-10 · 3 years ago · #certificates
hobby coder here with a question. When implementing client authentication, do we just store the tls client hash? If so how is this not able to be spoofed? I'm guessing there is some public key authentication going on in the background. looking at the spec and some searches only helped a little.
💬 4 comments · 2023-05-27 · 3 years ago · #certificates #client_certificates #programming