<form method="post">
	<div class="elem">
		<label for="comment">comment</label>
		<input type="text" id="comment" name="comment" value="@comment" required>
	</div>
	<div class="elem">
		<label for="newkey">public key in PEM format</label>
		<textarea id="newkey" name="newrsa" required></textarea>
	</div>
	<p>to confirm your ownership of the private key, you'll need to sign the nonce provided below before it expires in 10 minutes. on unix-like OSes, you can usually use the openssl utility for this.</p>
	<code style="display:block; user-select: all">echo -n @nonce | openssl dgst -sha256 -sign privkey.pem | openssl base64</code>
	<div class="elem">
		<label>nonce</label>
		<div class="txtbox">@nonce</div>
		<input type="hidden" name="nonce" value="@nonce">
		<input type="hidden" name="noncevld" value="@noncevld">
	</div>
	<div class="elem">
		<label for="sig">nonce signature</label>
		<textarea id="sig" name="sig" required></textarea>
	</div>
	<menu class="choice horizontal">
		<button name="act" value="newcred">enroll</button>
		<a class="button" href="?">cancel</a>
	</menu>
</form>
