[#13] Are certificates required for titan upload?

Been working on titan submissions and gmcapsule is showing:

60 Client certificate required for upload

This seems to conflict with the titan spec which says:

token is necessary to defend against vandalism or spam – the only alternative would be the mandatory registering of client certificates. I feel that raises the barrier to entry quite considerably.

It seems like uploads should require either a token or a certificate, but certificate should be optional. The certificate requirement is creating a problem for me at the moment since I want users to be able to upload without needing a certificate.

Am I missing any obvious settings?

#documentation #titan

=> 🐞 Issue #13 in s/GmCapsule-Issues
=> 💎 istvan

2024-09-08 · 4 months ago

3 Comments ↓

=> 🕹️ skyjake [mod...] · Sep 08 at 04:00:

GmCapsule does allow certificate-less Titan uploads. They are disabled by default, and need to be enabled with a configuration setting. Unfortunately, I've forgotten to document it! Just add this to the [titan] section:

require_identity = false

I'll fix the docs...

=> 💎 istvan [OP] · Sep 08 at 04:10:

Thank you again, skyjake! I hope I’m not bothering you with all these questions. I always appreciate your help.

=> Commit d7db6064 · Documented missing settings

2024-09-08 · 4 months ago

=> 🕹️ skyjake [mod...] · Sep 08 at 04:30:

No problem. 🙂