Andrew Cagney
unread,Sep 27, 2025, 8:29:43 AM (9 days ago) Sep 27Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to dev-tec...@mozilla.org
Hi,
I'm merging Rishabh Kumar's EDDSA changes into Libreswan (yes, it's
been a while).
Currently I'm stuck on the tweaks needed to generate EDDSA test certs.
The patch used openssl since, at the time, libreswan was using an
interesting combination of pyOpenSSL and raw openssl commands.
Unfortunately, since the patch was written, pyOpenSSL was deprecated;
our solution being to flush that code and use NSS instead. Rather
than re-introduce an openssl dependency, is it possible to generate
certs using cerutil? I couldn't see anything in the documentation.
Andrew