[GH-ISSUE #29] Generate bundle secret using WebCrypto #22

Closed
opened 2026-02-26 03:33:31 +03:00 by kerem · 1 comment
Owner

Originally created by @laurivosandi on GitHub (Feb 2, 2017).
Original GitHub issue: https://github.com/laurivosandi/certidude/issues/29

Currently if .ovpn or .p12 bundle is downloaded the RSA private key is generated on the server and served for the web browser.

To do it technically correctly the private key would have to be generated on the client side. Using WebCrypto and pki.js we should be able to generate RSA keypair and bundle file in the browser and have it signed by server since the user is already logged in.

The .ovpn could be generated using JavaScript blobs.

Originally created by @laurivosandi on GitHub (Feb 2, 2017). Original GitHub issue: https://github.com/laurivosandi/certidude/issues/29 Currently if .ovpn or .p12 bundle is downloaded the RSA private key is generated on the server and served for the web browser. To do it technically correctly the private key would have to be generated on the client side. Using WebCrypto and pki.js we should be able to generate RSA keypair and bundle file in the browser and have it signed by server since the user is already logged in. The .ovpn could be generated using JavaScript blobs.
kerem closed this issue 2026-02-26 03:33:31 +03:00
Author
Owner

@laurivosandi commented on GitHub (Feb 25, 2018):

Used https://github.com/digitalbazaar/forge instead. PKCS#12 is also handled there.

<!-- gh-comment-id:368340681 --> @laurivosandi commented on GitHub (Feb 25, 2018): Used https://github.com/digitalbazaar/forge instead. PKCS#12 is also handled there.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/certidude-laurivosandi#22
No description provided.