-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
The idea of storing the keys in the environment is not secure. At the moment they are in plain text in ~/.config/config.fish.
A better solution is this:
- Create a service,
EBKeyService, that runs under a userebkeyservice. - This service is an special implementation of a server.
- The service will store its certificate in
/etc/ssl/certsasebkeyservicecert.pem - The service will store its private key in
/etc/ssl/privateasebkeyservicekey.pem - The application server or client uses a private key saved as
~/.ssl/ebserverkey.pemor~/.ssl/ebclientkey.pem - The application server or client uses a certificate saved under
~/.ssl/ebservercert.pemor~/.ssl/ebclientcert.pem - Upon launch, the client or server will establish a connection with the
EBKeyServiceusing the credentials stored in~\.ssland will request the true private key. - This private key will be used in combination with the certificate stored in
~\.sslto communicate to the server or client.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels