Uploaded image for project: 'Cockpit'
  1. Cockpit
  2. COCKPIT-1305

Support Post Quantum certificates

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Major Major
    • 25Q4
    • None
    • None
    • None
    • 5
    • False
    • Hide

      None

      Show
      None
    • False
    • Testable
    • ?
    • ?
    • rhel-cockpit
    • ?

      From RHELMISC-11973, our certificate generation still hardcodes to RSA, for full PQ we need to generate two certificate pairs, one RSA and one PQ. PQ can be generated with:

      openssl req \
    -x509 \
    -newkey mldsa65 \
    -keyout localhost-mldsa.key \
    -subj /CN=localhost \
    -addext subjectAltName=DNS:localhost \
    -days 30 \
    -nodes \
    -out localhost-mldsa.crt

      sscg at the moment does not support post quantum certificate generation.

      Our webserver also has to support loading multiple certificates to such as the openssl server example

      openssl s_server \
    -cert localhost-mldsa.crt -key localhost-mldsa.key \
    -dcert localhost-rsa.crt -dkey localhost-rsa.key

              Unassigned Unassigned
              jvanderw@redhat.com Jelle van der Waa
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: