Allow ML-DSA roots and end-entities

ca/ca.go

@@ -115,6 +115,8 @@ func makeKey(keyAlg string) (crypto.Signer, []byte, error) {
 		key, err = rsa.GenerateKey(rand.Reader, 2048)
 	case "ecdsa":
 		key, err = ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
+	case "mldsa":
+		key, err = mldsaGenerateKey()
 	}
 	if err != nil {
 		return nil, nil, err

ca/ca_mldsa.go

@@ -0,0 +1,12 @@
+//go:build go1.27
+
+package ca
+
+import (
+	"crypto"
+	"crypto/mldsa"
+)
+
+func mldsaGenerateKey() (crypto.Signer, error) {
+	return mldsa.GenerateKey(mldsa.MLDSA65())
+}

ca/ca_mldsa_stub.go

@@ -0,0 +1,13 @@
+//go:build !go1.27
+
+package ca
+
+import (
+	"crypto"
+	"fmt"
+)
+
+// crypto/mldsa is not available before Go 1.27
+func mldsaGenerateKey() (crypto.Signer, error) {
+	return nil, fmt.Errorf("unsupported key algorithm: mldsa")
+}

cmd/pebble/main.go

@@ -110,7 +110,7 @@ func main() {
 	if keyAlg == "" {
 		keyAlg = "rsa"
 	}
-	acceptableKeyAlgs := []string{"rsa", "ecdsa"}
+	acceptableKeyAlgs := []string{"rsa", "ecdsa", "mldsa"}
 	if !slices.Contains(acceptableKeyAlgs, keyAlg) {
 		cmd.FailOnError(fmt.Errorf("%q is not one of %#v", keyAlg, acceptableKeyAlgs), "invalid key algorithm")
 	}

wfe/wfe_mldsa.go

@@ -0,0 +1,13 @@
+//go:build go1.27
+
+package wfe
+
+import (
+	"crypto/x509"
+)
+
+func init() {
+	goodSignatureAlgorithms[x509.MLDSA44] = true
+	goodSignatureAlgorithms[x509.MLDSA65] = true
+	goodSignatureAlgorithms[x509.MLDSA87] = true
+}