Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
A utility to generate CSRs suitable for validating Onion Domain Names per Appendix B of the CA/Browser Forum Baseline Requirements
onionmaker is a utility to create CSRs for Tor v3 services. The CSRs generated by this utility are suitable for validation of Tor v3 Onion Domain Names according to Appendix B of the CA/Browser Forum Baseline Requirements.
pip3 install onionmaker
onionmaker ca_random_value [hidden_service_dir]
You may need to run step 2 as root depending on the access permissions of the private key file.
onionmaker requires two command line arguments:
Argument | Description |
---|---|
ca_random_value | The Random Value supplied the CA. It must be a string consisting of 32 alphanumeric characters. |
hidden_service_dir | The configuration directory for the Tor v3 Onion service. Default value is /var/lib/tor/hidden_service . |
The utility will then create and sign a CSR with the specified private key, outputting the CSR to stdout.
This software bundles the orlp/ed25519 Ed25519 library for CSR signing. The distribution has been bundled unmodified except for omitting the Windows .dll binaries.`
FAQs
A utility to generate CSRs suitable for validating Onion Domain Names per Appendix B of the CA/Browser Forum Baseline Requirements
We found that onionmaker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.