You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
DESIGN.md 682B
DESIGN.md 682B
Design Description for SSL Self Signed
This generates a Certificate Authority (CA) and then a signing request (CSR), which results in the certificate for this server after signing it with our CA.
The CA cert is placed in the secret folder, you can install it eg. in Arch like this:
sudo trust anchor --store secret/DOMAIN/sovereign-self-signed-cert/DOMAIN/etc/letsencrypt/live/DOMAIN/chain.pem
It will then automatically be picked up by browsers like Firefox and Chrome.
To trust the CA on the server itself (if you want to run some clients), do:
sudo cp /etc/letsencrypt/rootCA.crt /usr/local/share/ca-certificates/iot.fritz.box.crt
sudo update-ca-certificates