[Tech] A server to test client certificates?

I'm quite sad that gemini://gemini.conman.org/ is gone, it was very useful for, among other things, testing client certificate support in a Gemini client. I'm looking for an alternative. Is there another server that accepts client certificates and echoes in some way the received cert, to include in a test suite for a client?

On 11/28/21 12:15, Stephane Bortzmeyer wrote: > I'm quite sad that gemini://gemini.conman.org/ is gone, it was very > useful for, among other things, testing client certificate support in > a Gemini client. > > I'm looking for an alternative. Is there another server that accepts > client certificates and echoes in some way the received cert, to > include in a test suite for a client? > i have a cgi script that i run under molly-brown for this purpose gemini://xj-ix.luxe:1969/bin/fingerprint mostly reliable, but hosted on a wireless mesh so ymmv

On Sun, Nov 28, 2021 at 12:18 PM Stephane Bortzmeyer <stephane@sources.org> wrote: > I'm quite sad that gemini://gemini.conman.org/ is gone, it was very > useful for, among other things, testing client certificate support in > a Gemini client. > > I'm looking for an alternative. Is there another server that accepts > client certificates and echoes in some way the received cert, to > include in a test suite for a client? > The gemini server at ondollo.com has some URLs to test clients, one of which will respond with the common name and a chunk from the first part of the fingerprint. ``` gemini://ondollo.com/internal/test?showCert ``` Using the Mansfield client to hit that url and dump the raw response to the cli looks like this: ``` ./mansfield -rs gemini://ondollo.com/internal/test?showCert 20 text/gemini common_name_in_cert:26:99:8E ``` I wouldn't mind adding more to the output if it helped you.

On Sun, Nov 28, 2021 at 03:31:41PM -0700, gemini@xj-ix.luxe <gemini@xj-ix.luxe> wrote a message of 16 lines which said: > i have a cgi script that i run under molly-brown for this purpose > > gemini://xj-ix.luxe:1969/bin/fingerprint It works fine, thanks. % agunua --certificate sample-cert-user.pem --key sample-key-user.pem gemini://xj-ix.luxe:1969/bin/fingerprint ... ``` hash=572b4ab52c1d0942ade84b75ae5ae4e56ff70ecc43c4b004e21808ff84c4f6e2 cn=User ```

On Sun, Nov 28, 2021 at 04:41:09PM -0700, Mansfield <mansfield@ondollo.com> wrote a message of 68 lines which said: > The gemini server at ondollo.com has some URLs to test clients, one of > which will respond with the common name and a chunk from the first part of > the fingerprint. It works fine, thanks. % agunua --certificate sample-cert-user.pem --key sample-key-user.pem "gemini://ondollo.com/internal/test?showCert" User:51:DE:B5