From 7efa769cb81e434c182a80297c51ea286b8459af Mon Sep 17 00:00:00 2001 From: Keith Irwin Date: Fri, 7 Jul 2023 15:06:51 -0600 Subject: [PATCH] Minor updates to CA cert instructions --- _src/nebuchadnezzar/ca.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/_src/nebuchadnezzar/ca.md b/_src/nebuchadnezzar/ca.md index d846a5c..fc53727 100644 --- a/_src/nebuchadnezzar/ca.md +++ b/_src/nebuchadnezzar/ca.md @@ -9,7 +9,7 @@ Importing GF4's CA certificate is required to use matrix and recommended for htt ## What is this? -**TLS** also known as **SSL** is a computer technology used to cryptographically sign and encrypt stuff. GF4 signs data on domains that end in `.gf4`. For your applications to recognize these signatures, you must install GF4's root certificate. Otherwise, you will get privacy errors in your browser. +**TLS** also known as **SSL** is a technology used to cryptographically sign and encrypt stuff. GF4 signs data on domains that end in `.gf4`. For your applications to recognize these signatures, you must install GF4's root certificate. Otherwise, you will get privacy errors in your browser. Follow these instructions to install the certificate on your computer or phone: @@ -17,10 +17,12 @@ Follow these instructions to install the certificate on your computer or phone: ### Fedora/Arch Linux (or p11-kit) +Run these commands as root + ``` -# mkdir -p /usr/local/share/ca-certificates -# curl -sL https://www.gf4.pw/ca.crt > /usr/local/share/ca-certificates/gf4.crt -# trust anchor /tmp/gf4.crt +mkdir -p /usr/local/share/ca-certificates +curl -sL www.gf4.pw/ca.crt >/usr/local/share/ca-certificates/gf4.crt +trust anchor /tmp/gf4.crt ``` **source**: [Arch wiki: User:Grawity/Adding a trusted CA certificate](https://wiki.archlinux.org/title/User:Grawity/Adding_a_trusted_CA_certificate) @@ -31,7 +33,7 @@ Open a terminal and run: ``` sudo apt-get install -y ca-certificates curl -curl -s https://www.gf4.pw/ca.crt | sudo tee /usr/local/share/ca-certificates/gf4.crt +curl -sL www.gf4.pw/ca.crt | sudo tee /usr/local/share/ca-certificates/gf4.crt sudo update-ca-certificates ``` **source**: [Ubuntu server docs: Security trust store](https://ubuntu.com/server/docs/security-trust-store)