Geen omschrijving
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

DESIGN.md 682B

Design Description for SSL Self Signed

This generates a Certificate Authority (CA) and then a signing request (CSR), which results in the certificate for this server after signing it with our CA.

The CA cert is placed in the secret folder, you can install it eg. in Arch like this:

sudo trust anchor --store secret/DOMAIN/sovereign-self-signed-cert/DOMAIN/etc/letsencrypt/live/DOMAIN/chain.pem

It will then automatically be picked up by browsers like Firefox and Chrome.

To trust the CA on the server itself (if you want to run some clients), do:

sudo cp /etc/letsencrypt/rootCA.crt /usr/local/share/ca-certificates/iot.fritz.box.crt
sudo update-ca-certificates