Commit ff733904 authored by Mitchell Monahan's avatar Mitchell Monahan
Browse files

Change command for convenient way to get root ca crt

parent fe4e0f63
Pipeline #123 passed with stage
in 22 seconds
......@@ -13,17 +13,14 @@
- Convenient Way - Note that this does not verify the root CA once downloaded.
1. Install `curl` and `jq`
```bash
sudo apt install -y curl jq
``
sudo apt install -y curl
```
2. Fetch+Install Root CA
```bash
curl -k https://ca.9net/root/17444b93edcf24609a95074b68b640cbb408884199e60424e3b39ddc03c23b1f | \
jq -r .ca | \
curl -k https://docs.p.9net/9net_root.crt \
sudo tee /usr/local/share/ca-certificates/9net.crt
```
3. Run `sudo update-ca-certificates`
## Requesting a certificate via ACME
Note: These instructions use the `step` CLI. Make sure you have the root CA installed as above. Also, to make renewals easier, I'd recommend having one certificate for all domains on a single machine (fairly easy with multiple `--san` parameteres)
1. Configure your webserver however you need to for webroot cert verification
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment