Conversation

Notices

1. Embed this notice
   pwm (pwm@darkdork.dev)'s status on Sunday, 20-Apr-2025 00:53:09 JST pwm

   • 
   @mint have you explored ssl certs for .onion domains? is the only path self-signed?
   • Embed this notice
      (mint@ryona.agency)'s status on Sunday, 20-Apr-2025 00:56:51 JST 

     in reply to
     @pwm There's a couple of CAs that offer onion certs, notably harica.gr used by the Farms. All paid, though.
     pwm likes this.
   • Embed this notice
     :blank: (i@declin.eu)'s status on Sunday, 20-Apr-2025 01:46:23 JST :blank:

     in reply to

     • 
     @mint @pwm there's also https://acmeforonions.org/ ( https://declin.eu/notice/As7zR69og3AQ6vhxTM )
     
     someone could set up a fedi CA root paired with an ACME server quite easily, but there's not enough friendship as is to work towards a federation instead of a clique
      likes this.
   • Embed this notice
      (mint@ryona.agency)'s status on Sunday, 20-Apr-2025 01:47:49 JST 

     in reply to

     • :blank:
     @i @pwm Getting pleromer to recognize custom CAs was a pain, I even tried dropping them directly into castore/certifi dependencies with no result. Eventually just disabled the check altogether, which also let me federate when someone forgets to renew their cert.