Ability to choose ECDSA/EdDSA algorithms

[tofuproxy.git] / cmd / tofuproxy / main.go

diff --git a/cmd/tofuproxy/main.go b/cmd/tofuproxy/main.go
index 5d40e49a360f70677919af28b5685ac197c1943f..babc8b7e34c34f3cfbe76d7ad9601e4d4edce9d6 100644 (file)
--- a/cmd/tofuproxy/main.go
+++ b/cmd/tofuproxy/main.go
@@ -32,6 +32,7 @@ import (
 )
 
 func main() {
+       ai := flag.String("ai", "eddsa", "ecdsa|eddsa (ECDSA-256 or EdDSA algorithm)")
        crtPath := flag.String("cert", "cert.pem", "Path to server X.509 certificate")
        prvPath := flag.String("key", "cert.pem", "Path to server PKCS#8 private key")
        bind := flag.String("bind", "[::1]:8080", "Bind address")
@@ -61,6 +62,7 @@ func main() {
        ttls.DNSSrv = *dnsSrv
        tofuproxy.CACert = caCert
        tofuproxy.CAPrv = caPrv
+       tofuproxy.X509Algo = *ai
        rounds.WARCOnly = *warcOnly
 
        ln, err := net.Listen("tcp", *bind)