[Freedombox-discuss] Associating self-signed SSL certificates for client authentication

[Spectral Emanation]

Hello friends,

How to do client certificate authentication without involving a CA in
x.509? I admit up front that OpenSSL is not my strong suit, and any
guidance would be appreciated if I am approaching this in the wrong
way.

I've created a self-signed certificate for lighttpd on my plug server:

openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes

And I've used about the same command to create a self-signed
certificate on my desktop, exported it as a PKCS#12 file and imported
it into my browser. Now I've got two certificates. How do I use
OpenSSL to create the association that lets me use my desktop
certificate to authenticate to my plug server?

I am trying to work this into a step-by step process that could be
integrated into a freedombox initial setup, to create a trusted
relationship between freedombox and browser.

Thanks,
Spectral Emanation