Fix private-only keys and make them script generated

certs/ed25519/ca-ed25519-priv.pem

@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIALLg+oVSN6eOx+rCjIui2cYL3VyBkk2pWBdv1+JXJBy
+-----END PRIVATE KEY-----

certs/ed25519/client-ed25519-priv.pem

@@ -1,3 +1,3 @@
 -----BEGIN PRIVATE KEY-----
-MC4CAQAwBQYDK2VwBCIEIBGdNYxa3ommO8aYO1oGaGSRQBqDYB0sKOdR3bqejqIQ
+MC4CAQAwBQYDK2VwBCIEICejNCo11Lu44dzY7A/BoNGiXPkG8ERdO5dNvd9KO6NO
 -----END PRIVATE KEY-----

certs/ed25519/gen-ed25519.sh

@@ -16,3 +16,17 @@ popd
 mv ${EXAMPLE}/*.pem .
 mv ${EXAMPLE}/*.der .
 
+convert() {
+    echo -en "\x30\x2e" > ${NAME}-ed25519-priv.der
+    head -c 48 ${NAME}-ed25519-key.der | tail -c 46 >> ${NAME}-ed25519-priv.der
+
+    echo "-----BEGIN PRIVATE KEY-----" > ${NAME}-ed25519-priv.pem
+    openssl base64 -in ${NAME}-ed25519-priv.der >> ${NAME}-ed25519-priv.pem
+    echo "-----END PRIVATE KEY-----" >> ${NAME}-ed25519-priv.pem
+}
+
+NAME=server convert
+NAME=client convert
+NAME=root convert
+NAME=ca convert
+

certs/ed25519/include.am

@@ -7,6 +7,8 @@ EXTRA_DIST += \
          certs/ed25519/ca-ed25519.pem \
          certs/ed25519/ca-ed25519-key.der \
          certs/ed25519/ca-ed25519-key.pem \
+         certs/ed25519/ca-ed25519-priv.der \
+         certs/ed25519/ca-ed25519-priv.pem \
          certs/ed25519/client-ed25519.der \
          certs/ed25519/client-ed25519.pem \
          certs/ed25519/client-ed25519-key.der \
@@ -17,6 +19,8 @@ EXTRA_DIST += \
          certs/ed25519/root-ed25519.pem \
          certs/ed25519/root-ed25519-key.der \
          certs/ed25519/root-ed25519-key.pem \
+         certs/ed25519/root-ed25519-priv.der \
+         certs/ed25519/root-ed25519-priv.pem \
          certs/ed25519/server-ed25519.der \
          certs/ed25519/server-ed25519.pem \
          certs/ed25519/server-ed25519-key.der \

certs/ed25519/root-ed25519-priv.pem

@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEICejNCo11Lu44dzY7A/BoNGiXPkG8ERdO5dNvd9KO6NO
+-----END PRIVATE KEY-----

certs/ed25519/server-ed25519-priv.pem

@@ -1,3 +1,3 @@
 -----BEGIN PRIVATE KEY-----
-MC4CAQAwBQYDK2VwBCIEINjpdrI/H/eIdfXd+HrGSTBu6Z/LnR4rwBjvu3WJ5ndn
+MC4CAQAwBQYDK2VwBCIEIAIvxf+6jtDSvwOOdo/IhoBxh5cx4kCs37uQFVJuJKE5
 -----END PRIVATE KEY-----