Simplify client certification creation

[twisti-dev]

What Needs Improvement?

Right now you manually have to create a client key in your local machine and Windows you event have to do it in wsl wich is very annoying.

Proposed Improvement

Add a command to the standalone wich generates a new client certificate easily. You can download the file via a link or from a folder and the key will be deleted after 10-5 minutes.

Benefits of the Improvement

No response

Additional Context

No response

[twisti-dev]

Generating client certificates directly from the application might sound convenient, but it's generally not advisable for production environments. Here's why:

• Security & Trust Issues: Automatically generating certificates within the application without a trusted Certificate Authority (CA) makes it impossible to properly validate the identity of clients. This introduces risks like man-in-the-middle attacks.

• Lack of Centralized Management: Proper certificate management requires controlled generation, renewal, revocation, and monitoring—tasks typically handled by dedicated infrastructure (e.g., Vault, cert-manager, internal PKI, or Let's Encrypt).

• Compliance and Auditability: Automatically generated keys without centralized logging or audit trails can lead to compliance issues or security incidents that go unnoticed.

Recommended approach:

Instead of generating client certificates directly in the standalone app, use established tools or infrastructure such as:

• Vault or cert-manager for secure automated certificate management.
• Let's Encrypt or an internal CA for centralized and trusted certificate issuance.

Therefore, this issue will be closed for now.