<form method="post">
<div class="elem">
<label for="comment">comment</label>
<input type="text" id="comment" name="comment" value="@comment" required>
</div>
<div class="elem">
<label for="newkey">public key in PEM format</label>
<textarea id="newkey" name="newrsa" required></textarea>
</div>
<p>to confirm your ownership of the private key, you'll need to sign the nonce provided below before it expires in 10 minutes. on unix-like OSes, you can usually use the openssl utility for this.</p>
<code style="display:block; user-select: all">echo -n @nonce | openssl dgst -sha256 -sign privkey.pem | openssl base64</code>
<div class="elem">
<label>nonce</label>
<div class="txtbox">@nonce</div>
<input type="hidden" name="nonce" value="@nonce">
<input type="hidden" name="noncevld" value="@noncevld">
</div>
<div class="elem">
<label for="sig">nonce signature</label>
<textarea id="sig" name="sig" required></textarea>
</div>
<menu class="choice horizontal">
<button name="act" value="newcred">enroll</button>
<a class="button" href="?">cancel</a>
</menu>
</form>