Let's Encrypt Community Support

Can/should ISRG submit a proposal to support Ed25519/Ed448 certificates to CA/B Forum?

ISRG/Organizational

schoen September 16, 2019, 5:04pm 9

It seems that OpenSSL did add some form of support already

including a sample certificate

github.com

openssl/openssl/blob/master/test/certs/server-ed25519-cert.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

which my OpenSSL command line can parse with openssl x509.

Topic		Replies	Views	Activity
EdDSA Certificates Feature Requests	9	3752	January 2, 2023
Support Ed25519 and Ed448 Feature Requests	11	9982	December 29, 2020
TLS 1.2 and TLS 1.3 need Curve25519 and Curve448 SSL certificates Issuance Policy	14	6745	July 27, 2023
Ed25519 with Poly1305-Chacha20 Support in line with TLS 1.3 Standards Issuance Tech	7	6199	July 4, 2017
Request For CertBot To Support The Signing of Ed25519 Certificates Feature Requests	13	6931	December 24, 2021