alecmuffett / eotk

Enterprise Onion Toolkit
GNU General Public License v3.0
766 stars 103 forks source link

20210804 separate ssl certs per onion #101

Closed alecmuffett closed 2 years ago

alecmuffett commented 2 years ago

Enable by-default a switch which creates / expects one TLS/SSL certificate per V3 onion address in any given project.

A given onion address, eg: 3ppk6gyownviy7fdqyyjy3badg6gyvi7xxyzdndlzxa7nzujhkqejqad.onion is truncated to 20 characters in length, and the certificate and key expected to exist in:

projects.d/projectname.d/ssl.d/3ppk6gyownviy7fdqyyj-v3.cert
projects.d/projectname.d/ssl.d/3ppk6gyownviy7fdqyyj-v3.pem

...respectively.