Open
Conversation
This is with the end goal of getting rough compatibility with paultag/minica so we can have one true minica tool.
This is for drop-in(-ish) compatibility with https://github.com/paultag/minica
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Okay! As discussed in #48, all key parties (both authors, plus the Debian maintainer) are game to try to unify on a single
minicaimplementation. I really appreciate everybody's quick responses and flexibility.Right now, the situation is a little confusing:
minicayields the jsha version.minicaon Debian (or variants, like Ubuntu) yields the paultag version.minicavia Homebrew (on macOS) yields the jsha version.The biggest differences between the tools are in the command-line UI and the default filenames/flags.
In this patch, I've added a single
tests.shthat exercises the basic functionality (issue a snakeoil CA and cert, trust the snakeoil CA, then use it for a TLS connection), and passes against both versions with the modification to permit domains to be specified as trailing/non-flagged arguments.If this were to replace the existing Debian version, however, it would still technically be a breaking change for two reasons: