Encryption-less web service for amateur radio using TLS client certificates for authentication
International bodies and local governments grants special rights to operators of the amateur radio service. This allows free tinkering and experimentation with wireless technology. In exchange, all communications should be performed in the clear.
However, this does not preclude the use of cryptography altogether. With client authentication, the service can still allow visitors to log in.
Install the set-misc module for Nginx.
If it is included in your distribution, the package's names might be nginx-plus-module-set-misc
.
For more detailed instructions, go to https://docs.nginx.com/nginx/admin-guide/dynamic-modules/set-misc/.
Then, start the service with cargo run
. Finally, set up a reverse proxy with the provided nginx.conf
.
Note: if you start Nginx with the new site before starting the service, visitor certificates might not work. You just need to restart Nginx to fix it.