2
0

6 Commits

Author SHA1 Message Date
1b14161a0e modern openssl needs rsa key >= 2048
per
https://docs.openssl.org/3.3/man3/SSL_CTX_set_security_level/#default-callback-behaviour
the default "security level" in openssl 3.3 is 2
2025-10-20 23:45:53 +01:00
87c45dec67 switch certifix-client to luahttp 2025-10-19 14:11:51 +01:00
d1cd13d5dc CSR version should be 1 not 3 2025-10-19 14:11:51 +01:00
7e2b0068e6 nixfmt-rfc-style
There is nothing in this commit except for the changes made by
nix-shell -p nixfmt-rfc-style --run "nixfmt ."

If this has mucked up your open branches then sorry about that. You
can probably nixfmt them to match before merging
2025-02-10 21:55:08 +00:00
1a915e91ff add altname to CSR 2024-10-06 10:13:28 +01:00
197e2eb5b1 new package certifix-client uses certifix to sign ssl client cert
this is initially for TLS-enabled logging but would be useful for
anything on a liminix box that wants to talk to a network service in a
"zero trust" setup
2024-10-03 23:00:08 +01:00