FsVault: Better compatibility of FsVault with OpenSSL for EC key generation

[thomasrutger]

Feature Request

When using the FsVault, I tried to use OpenSSL together with keytool to generate the Keystore with the EC keys. However, this is apparently not supported and I read that I should use Keystore Explorer instead to generate keys. This is inconvenient when you want to generate keys from a script.

Additionally, it seems that the keys are converted to PEM format before they are used. So why not just configure the keys in PEM files directly, instead of using JKS?

Which Areas Would Be Affected?

FsVault

Why Is the Feature Desired?

Better compatibility with standard tooling

Solution Proposal

• Change current implementation such that EC keys created using OpenSSL + keytool
• Configure using PEM files directly instead of JKS (considering they are converted to PEM anyway)

[github-actions]

Thanks for your contribution 🔥 We will take a look asap 🚀