-- Leo's gemini proxy

-- Connecting to gemi.dev:1965...

-- Connected

-- Sending request

-- Meta line: 20 text/gemini

I've set up a server real quick over on gemini://ellertson.org/ .  I'm
still working on writing the rc script to set it up as a proper
service, but it is running as I write this.

On the site, you will ll find a link to a CGI script to a mirror of the
Drudge Report news aggregator.  It only shows the main headlines and
the dozen or so stories you see in the upper left of the site as of
now, but it's still pretty neat.  With any luck this will be the most
political message I will send in the mailing list.  XD

Have fun!

~ Parker

I took the down to experiment with generating keys.  It's back up now,
but do be aware that the certs could be improperly generated.


On Thu, 9 Jul 2020 13:49:36 -0700
Parker Ellertson <pellertson at firemail.cc> wrote:

> I've set up a server real quick over on gemini://ellertson.org/ .  I'm
> still working on writing the rc script to set it up as a proper
> service, but it is running as I write this.
>
> On the site, you will ll find a link to a CGI script to a mirror of
> the Drudge Report news aggregator.  It only shows the main headlines
> and the dozen or so stories you see in the upper left of the site as
> of now, but it's still pretty neat.  With any luck this will be the
> most political message I will send in the mailing list.  XD
>
> Have fun!
>
> ~ Parker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <https://lists.orbitalfox.eu/archives/gemini/attachments/20200709/3684
9fde/attachment.sig>

> I took the down to experiment with generating keys. It's back up now,
> but do be aware that the certs could be improperly generated.

"certificate is valid for *.ellertson.org, not ellertson.org"

Yeah, seems like it. Maybe my post might be of use? ?

gemini://makeworld.gq/gemlog/2020-07-06-openssl.gmi

Seems like a quick fix though, just change the CN to ellertson.org instead.
If you actually want to create a wildcard cert, you can use this command
from the post:

openssl req -new -subj "/CN=*.example.com" -addext "subjectAltName =
DNS:example.com, DNS:*.example.com" -x509 -newkey ec -pkeyopt
ec_paramgen_curve:prime256v1 -days 1825 -nodes -out cert.pem -keyout key.pem

The part you missed was adding the regular domain to subjectAltName.

Cheers,
makeworld

On Thu, 9 Jul 2020 13:49:36 -0700
Parker Ellertson <pellertson at firemail.cc> wrote:

> I've set up a server real quick over on gemini://ellertson.org/ .  I'm
> still working on writing the rc script to set it up as a proper
> service, but it is running as I write this.

Congratulations getting your own site up.

--
Matthew Graybosch		gemini://starbreaker.org
#include <disclaimer.h>		gemini://demifiend.org
https://matthewgraybosch.com	gemini://tanelorn.city
"Out of order?! Even in the future nothing works."

-- Response ended

-- Page fetched on Thu May 23 22:28:07 2024