Add WireGuard support #3

Open
opened 2021-06-08 17:28:09 +00:00 by lauri · 2 comments
Owner
* Make EC curve configurable via env var * Add JS code to generate WireGuard profile, see https://git.k-space.ee/pinecrypt/frontend/src/branch/master/static/js/certidude.js#L168 * Add WireGuard wrapper on server side that uploads pubkeys to kernel
Author
Owner

oscrypto, asn1crypto, certbuilder etc are missing support for ed25519, but seems to be rather easy to add the support. See here for wbond comments on where to add what:
https://github.com/wbond/asn1crypto/pull/134#issuecomment-508498771

oscrypto, asn1crypto, certbuilder etc are missing support for ed25519, but seems to be rather easy to add the support. See here for wbond comments on where to add what: https://github.com/wbond/asn1crypto/pull/134#issuecomment-508498771
Author
Owner

On the other hand WireGuard does not really rely on CA hierarchy, we could just store pubkeys in Mongo. StrongSwan seems to support ed25519 certs, so it might be good idea to support signed certs with ed25519 anyway.

On the other hand WireGuard does not really rely on CA hierarchy, we could just store pubkeys in Mongo. StrongSwan seems to support ed25519 certs, so it might be good idea to support signed certs with ed25519 anyway.
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: pinecrypt/pinecrypt-gateway-backend#3
No description provided.