pinecrypt/pinecrypt-gateway-backend
2
1
Fork 0
Code Issues 10 Pull Requests Projects Activity

Add WireGuard support #3

New Issue
Open
opened 2021-06-08 17:28:09 +00:00 by lauri · 2 comments
lauri commented 2021-06-08 17:28:09 +00:00
Owner
Copy Link
Copy Source
* Make EC curve configurable via env var * Add JS code to generate WireGuard profile, see https://git.k-space.ee/pinecrypt/frontend/src/branch/master/static/js/certidude.js#L168 * Add WireGuard wrapper on server side that uploads pubkeys to kernel
lauri commented 2021-06-09 09:54:24 +00:00
Author
Owner
Copy Link
Copy Source

oscrypto, asn1crypto, certbuilder etc are missing support for ed25519, but seems to be rather easy to add the support. See here for wbond comments on where to add what:
https://github.com/wbond/asn1crypto/pull/134#issuecomment-508498771

oscrypto, asn1crypto, certbuilder etc are missing support for ed25519, but seems to be rather easy to add the support. See here for wbond comments on where to add what: https://github.com/wbond/asn1crypto/pull/134#issuecomment-508498771
lauri commented 2021-06-09 09:56:15 +00:00
Author
Owner
Copy Link
Copy Source

On the other hand WireGuard does not really rely on CA hierarchy, we could just store pubkeys in Mongo. StrongSwan seems to support ed25519 certs, so it might be good idea to support signed certs with ed25519 anyway.

On the other hand WireGuard does not really rely on CA hierarchy, we could just store pubkeys in Mongo. StrongSwan seems to support ed25519 certs, so it might be good idea to support signed certs with ed25519 anyway.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
lauri (Lauri Võsandi) marva (Marvin Martinson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pinecrypt/pinecrypt-gateway-backend#3