A utility to generate CSRs suitable for validating Onion Domain Names per Appendix B of the CA/Browser Forum Baseline Requirements
onionmaker is a utility to create CSRs for Tor v3 services. The CSRs generated by this utility are suitable for validation of Tor v3 Onion Domain Names according to Appendix B of the CA/Browser Forum Baseline Requirements.
pip3 install onionmakeronionmaker ca_random_value [hidden_service_dir]You may need to run step 2 as root depending on the access permissions of the private key file.
onionmaker requires two command line arguments:
| Argument | Description |
|---|---|
| ca_random_value | The Random Value supplied the CA. It must be a string consisting of 32 alphanumeric characters. |
| hidden_service_dir | The configuration directory for the Tor v3 Onion service. Default value is /var/lib/tor/hidden_service. |
The utility will then create and sign a CSR with the specified private key, outputting the CSR to stdout.
This software bundles the orlp/ed25519 Ed25519 library for CSR signing. The distribution has been bundled unmodified except for omitting the Windows .dll binaries.`
FAQs
A utility to generate CSRs suitable for validating Onion Domain Names per Appendix B of the CA/Browser Forum Baseline Requirements
We found that onionmaker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI confirms no security flaws were exploited in the Ultralytics supply chain attack and highlights improvements for safer package publishing.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.