Home A - Z
Page Index

An Otter Wiki

Commit 1ceda8

2025-05-01 16:21:48 Arne: -/-
PQCryptoOpenVPN.md ..
@@ 49,3 49,17 @@
fail similar to this:
OpenSSL: error:0A000065:SSL routines::no suitable key share:
+
+ This also requires OpenVPN to be used with a TLS library that supports these new key-agreement algorithms like
+ OpenSSL 3.5.0.
+
+ # Post-quantum signing singing/certificates
+
+ Having post-quantum key-agreement is much critical right now. Especially for a TLS/VPN connection where verification of
+ certificates is only needed for the connection itself and being able to verify signatures and identity later is at
+ least currently of lesser concern. So at least at the moment, the urgency here is not as big as it is for the key-agreement.
+
+ But creating certificates with post-quantum algorithm is also possible. E.g. creating a self-signed certificate that is usable with
+ `--peer-fingerprint` using the ML-DSA-65 algorith cna be done using OpenSSL (3.5.0 or later):
+
+ openssl req -x509 -newkey ML-DSA-65 -keyout styx-mldsa-65.key -out styx-mldsa-65.key -nodes -sha256 -days 3650 -subj '/CN=styx-mldsa-65'
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9