Add WireGuard support #3

New Issue

lauri · 2021-06-08T17:28:09Z

lauri commented

2021-06-08 17:28:09 +00:00

Make EC curve configurable via env var
Add JS code to generate WireGuard profile, see https://git.k-space.ee/pinecrypt/frontend/src/branch/master/static/js/certidude.js#L168
Add WireGuard wrapper on server side that uploads pubkeys to kernel

* Make EC curve configurable via env var * Add JS code to generate WireGuard profile, see https://git.k-space.ee/pinecrypt/frontend/src/branch/master/static/js/certidude.js#L168 * Add WireGuard wrapper on server side that uploads pubkeys to kernel

lauri commented

2021-06-09 09:54:24 +00:00

oscrypto, asn1crypto, certbuilder etc are missing support for ed25519, but seems to be rather easy to add the support. See here for wbond comments on where to add what:
https://github.com/wbond/asn1crypto/pull/134#issuecomment-508498771

oscrypto, asn1crypto, certbuilder etc are missing support for ed25519, but seems to be rather easy to add the support. See here for wbond comments on where to add what: https://github.com/wbond/asn1crypto/pull/134#issuecomment-508498771

lauri commented

2021-06-09 09:56:15 +00:00

On the other hand WireGuard does not really rely on CA hierarchy, we could just store pubkeys in Mongo. StrongSwan seems to support ed25519 certs, so it might be good idea to support signed certs with ed25519 anyway.

Sign in to join this conversation.

No Label

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: pinecrypt/pinecrypt-gateway-backend#3