Tried to use openssl ed25519 signed certificates instead of the dgraph cert RSA ones. Couldn’t figure out how to do it and was recommended to file a feature request.
What you wanted to do
I want to use ED25519 over RSA due to the fact that it is considered best practice. Would be nice if this was included in dgraph cert
What you actually did
Tried to use openssl certificates to trick dgraph into accepting ED25519 signed certs but I think that PCKS1 formatted certificates are the only ones accepted by dgraph so it didn’t work.
Why that wasn’t great, with examples
Just would like the option to have support for current best practice.
@daidoji thanks for submitting this issue. A new PR #3269 adds support for ECDSA. ~We will use this for EdDSA support.~
Ed25519 X509 support is slated for TLS 1.3, so we’ll might have to revisit this again when Go adds support for it (only HTTP client supports it AFAIK).