💾 Archived View for lists.flounder.online › gemini › threads › YaPVWzVtjghhtsXU@sources.org.gmi captured on 2022-07-16 at 16:21:38. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2022-04-28)

-=-=-=-=-=-=-

[Tech] A server to test client certificates?

[Tech] A server to test client certificates?

From: stephane@sources.org

Date: Sun, 28 Nov 2021 20:15:39 +0100

Message-Id: YaPVWzVtjghhtsXU@sources.org

To: <gemini@lists.orbitalfox.eu>

Reply

Export

--------------------------------------

I'm quite sad that gemini://gemini.conman.org/ is gone, it was very

useful for, among other things, testing client certificate support in

a Gemini client.

I'm looking for an alternative. Is there another server that accepts

client certificates and echoes in some way the received cert, to

include in a test suite for a client?

Re: [Tech] A server to test client certificates?

From: gemini@xj-ix.luxe

Date: Sun, 28 Nov 2021 15:31:41 -0700

Message-Id: 6092699f-b8e7-f602-2d9c-e8d58067c28d@sunshinegardens.org

To: <gemini@lists.orbitalfox.eu>

In-Reply-To: YaPVWzVtjghhtsXU@sources.org

Reply

Export

--------------------------------------

On 11/28/21 12:15, Stephane Bortzmeyer wrote:

I'm quite sad that gemini://gemini.conman.org/ is gone, it was very
useful for, among other things, testing client certificate support in
a Gemini client.
> I'm looking for an alternative. Is there another server that accepts
client certificates and echoes in some way the received cert, to
include in a test suite for a client?

i have a cgi script that i run under molly-brown for this purpose

gemini://xj-ix.luxe:1969/bin/fingerprint

mostly reliable, but hosted on a wireless mesh so ymmv

Re: [Tech] A server to test client certificates?

From: mansfield@ondollo.com

Date: Sun, 28 Nov 2021 16:41:09 -0700

Message-Id: CAFwUW92Js8eM3R7fA0fvWFHtjDd3MLov9_cQ0m56bRqvZobUJw@mail.gmail.com

To: <gemini@lists.orbitalfox.eu>

In-Reply-To: YaPVWzVtjghhtsXU@sources.org

Reply

Export

--------------------------------------

On Sun, Nov 28, 2021 at 12:18 PM Stephane Bortzmeyer <stephane@sources.org>

wrote:

I'm quite sad that gemini://gemini.conman.org/ is gone, it was very
useful for, among other things, testing client certificate support in
a Gemini client.
I'm looking for an alternative. Is there another server that accepts
client certificates and echoes in some way the received cert, to
include in a test suite for a client?

The gemini server at ondollo.com has some URLs to test clients, one of

which will respond with the common name and a chunk from the first part of

the fingerprint.

gemini://ondollo.com/internal/test?showCert

Using the Mansfield client to hit that url and dump the raw response to the

cli looks like this:

./mansfield -rs gemini://ondollo.com/internal/test?showCert
20 text/gemini
common_name_in_cert:26:99:8E

I wouldn't mind adding more to the output if it helped you.

Re: [Tech] A server to test client certificates?

From: stephane@sources.org

Date: Mon, 29 Nov 2021 08:17:57 +0100

Message-Id: YaR+pSv5zAp/TMBn@sources.org

To: <gemini@xj-ix.luxe>

In-Reply-To: 6092699f-b8e7-f602-2d9c-e8d58067c28d@sunshinegardens.org

Cc: <gemini@lists.orbitalfox.eu>

Reply

Export

--------------------------------------

On Sun, Nov 28, 2021 at 03:31:41PM -0700,

gemini@xj-ix.luxe <gemini@xj-ix.luxe> wrote

a message of 16 lines which said:

i have a cgi script that i run under molly-brown for this purpose
gemini://xj-ix.luxe:1969/bin/fingerprint

It works fine, thanks.

% agunua --certificate sample-cert-user.pem --key sample-key-user.pem gemini://xj-ix.luxe:1969/bin/fingerprint

...

hash=572b4ab52c1d0942ade84b75ae5ae4e56ff70ecc43c4b004e21808ff84c4f6e2
cn=User

Re: [Tech] A server to test client certificates?

From: stephane@sources.org

Date: Mon, 29 Nov 2021 08:19:33 +0100

Message-Id: YaR/BdS3ynn/KZfT@sources.org

To: "Mansfield" <mansfield@ondollo.com>

In-Reply-To: CAFwUW92Js8eM3R7fA0fvWFHtjDd3MLov9_cQ0m56bRqvZobUJw@mail.gmail.com

Cc: <gemini@lists.orbitalfox.eu>

Reply

Export

--------------------------------------

On Sun, Nov 28, 2021 at 04:41:09PM -0700,

Mansfield <mansfield@ondollo.com> wrote

a message of 68 lines which said:

The gemini server at ondollo.com has some URLs to test clients, one of
which will respond with the common name and a chunk from the first part of
the fingerprint.

It works fine, thanks.

% agunua --certificate sample-cert-user.pem --key sample-key-user.pem "gemini://ondollo.com/internal/test?showCert"

User:51:DE:B5