sandia-minimega / minimega

minimega
GNU General Public License v3.0
148 stars 66 forks source link

miniweb: Add TLS key decryption #1434

Open aherna opened 3 years ago

aherna commented 3 years ago

Describe your environment

  1. minimega version - all
  2. Linux distro/version -any
  3. Go compiler version - 1.12.17
  4. VM types - N/A

Describe the bug Feature request allow user to specify ecnrypted TLS certificates, ie generate TLS certs that have passphrases. Currently miniweb supports only TLS certs with no passphrases. To Reproduce Steps to reproduce the behavior: New default behavior on miniweb document openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365

This errors out because new standard is to add passphrase to the key Current work around openssl req -nodes -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365

if you do add a passphrase miniweb errors saying it cant decipher key.