Multiple TLS Crypt V2 Keys per X509 Certificate

Details

A single X509 client certificate can have unlimited TLS-Crypt-V2 client keys to chose from to connect to a specific server.

Option --sub-key-name=Name allows Easy-TLS to manage these unlimited keys.

Usage

The following commands support Sub-Keys:

• --sub-key-name=bob build-tls-crypt-v2-client alice

  The new key file will be: easytls/alice-bob-tls-crypt-v2.key

• --sub-key-name=bob inline-tls-crypt-v2

  The new Inline file will be: easytls/alice-bob.inline

• --sub-key-name=bob inline-remove - TODO

  This will remove the Inline file: easytls/alice-bob.inline and update the inline index.

• --sub-key-name=bob inline-renew - TODO

  This will renew the Inline file: easytls/alice-bob.inline and update the inline index.

• --sub-key-name=bob disable alice

  This will disable the client: X509 Certificate alice with TLS-Crypt-V2 key bob.

• --sub-key-name=bob enable alice

  This will enable the client: X509 Certificate alice with TLS-Crypt-V2 key bob.