proof-of-concept custom CA option for iroh-gateway

[benburkert]

A proof-of-concept to add a custom CA option to iroh-gateway, along with EAB token support for CAs like anchor.dev and zerossl.

[rklaehn]

Thanks for the PR, and sorry that we didn't look at this earlier.

So the use case is to be able to run a gateway without a letsencrypt CA? It does not add any additional deps, and the code looks simple enough, so as soon as the git dep is gone it seems that we can merge this.

[benburkert]

Thanks for the PR, and sorry that we didn't look at this earlier.

No worries, thanks for getting to it!

So the use case is to be able to run a gateway without a letsencrypt CA?

Yep, and be able to use a CA that requires EAB tokens like ZeroSSL.

as soon as the git dep is gone it seems that we can merge this.

The git dep still required until you release a new version of tokio-rustls-acme. I've updated it to use the latest commit on main.

[rklaehn]

Thanks for the PR, and sorry that we didn't look at this earlier.

No worries, thanks for getting to it!

So the use case is to be able to run a gateway without a letsencrypt CA?

Yep, and be able to use a CA that requires EAB tokens like ZeroSSL.

as soon as the git dep is gone it seems that we can merge this.

The git dep still required until you release a new version of tokio-rustls-acme. I've updated it to use the latest commit on main.

Overlooked that this crate is one of ours... 😊 . Will see what I can do.

[ramfox]

@benburkert tokio-rustls-acme v0.7.0 has been released! Thanks for bringing it to our attention 🙌

[benburkert]

thanks @ramfox, i just rebased in v0.7.0 so I think this is ready.

[ramfox]

@benburkert wonderful! it's in 🙌