๐Ÿ’พ Archived View for bbs.geminispace.org โ€บ s โ€บ AuraGem โ€บ 5312 captured on 2023-12-28 at 16:12:47. Gemini links have been rewritten to link to archived content

View Raw

More Information

โฌ…๏ธ Previous capture (2023-11-14)

๐Ÿšง View Differences

-=-=-=-=-=-=-

Cert Problems with Amfora and AuraGem

Apparently Amfora verifies certs differently than other clients, so it isn't working for AuraGem. It might have to do with CN vs. the subjectAltName thing in the certificate, but I'm not quite sure. I expect clients to look at *both*, because I use CN for the main address and subjectAltName for alternative domains (hence the "Alt"), but maybe that assumption was wrong, idk.

If anyone knows anything about this and how I can fix it, that would be appreciated.

Posted in: s/AuraGem

๐Ÿš€ clseibold

Sep 14 ยท 3 months ago

5 Comments โ†“

๐Ÿ‘ป mediocregopher ยท Sep 14 at 20:46:

I don't have a solution for you atm, except maybe to look at the certs for other capsules which do work with amfora and see what the differences are. But just to let you know: auragem's cert also doesn't work with Rosy Crow, the android client

๐Ÿš€ clseibold ยท Sep 14 at 21:20:

@mediocregopher Thanks for letting me know. I've decided to just switch out the certificate. This will require all existing users to accept this new certificate, but this new cert should work with all the gemini browsers now.

๐Ÿš€ mbays ยท Sep 15 at 06:56:

@clseibold Too late now, but if you'd kept the same key for the new certificate then many clients wouldn't have shown a warning.

โ€” Recipe for doing that

P.S. Welcome back to gemini!

๐Ÿš€ clseibold ยท Sep 15 at 12:01:

@mbays This is guaranteed to work with all clients? Because that would be surprising, honestly, lol

Anyways, yeah, I seen this post on your capsule before, I just forgot about it. If I ever do need to change the cert again, I'll keep it in mind.

Also, thanks! :)

๐Ÿš€ mbays ยท Sep 15 at 12:09:

@clseibold Not all, but I tested it as working on amfora, lagrange, and diohsc.