bin/gen_keys.ml at main · 8bit.lol/pegasus

8bit.lol / pegasus

forked from futur.blue/pegasus

fork atom

objective categorical abstract machine language personal data server

fork atom

pegasus / bin / gen_keys.ml

at main 19 lines 535 B view raw

wrap content

futur.blue generate-env -> gen-keys, move to its own binary 2mo ago

3c0694da

 1let () =
 2  Mirage_crypto_rng_unix.use_default () ;
 3  let rotation_key =
 4    Kleidos.K256.(generate_keypair () |> fst |> privkey_to_multikey)
 5  in
 6  let jwt_key =
 7    Kleidos.K256.(generate_keypair () |> fst |> privkey_to_multikey)
 8  in
 9  let dpop_nonce_secret =
10    Base64.(encode ~alphabet:uri_safe_alphabet ~pad:false)
11      (Mirage_crypto_rng_unix.getrandom 32)
12    |> Result.get_ok
13  in
14  Printf.printf
15    {|PDS_ROTATION_KEY_MULTIBASE=%s
16PDS_JWK_MULTIBASE=%s
17PDS_DPOP_NONCE_SECRET=%s
18|}
19    rotation_key jwt_key dpop_nonce_secret