summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPjotr Prins2024-06-24 01:52:04 -0500
committerPjotr Prins2024-06-24 01:52:04 -0500
commita3b44bb28ee2ef5895a4c379ed2cc53d4dd1e459 (patch)
treeab729cd58f803cf9bdee6722bab11d0c14924bfe
parent8efa6408c93879b5249361c3a41aad4405e7e303 (diff)
downloadgn-gemtext-a3b44bb28ee2ef5895a4c379ed2cc53d4dd1e459.tar.gz
VPN comment on certificates
-rw-r--r--topics/deploy/uthsc-vpn-with-free-software.gmi12
1 files changed, 12 insertions, 0 deletions
diff --git a/topics/deploy/uthsc-vpn-with-free-software.gmi b/topics/deploy/uthsc-vpn-with-free-software.gmi
index 3ef7508..914abbc 100644
--- a/topics/deploy/uthsc-vpn-with-free-software.gmi
+++ b/topics/deploy/uthsc-vpn-with-free-software.gmi
@@ -61,6 +61,18 @@ Older versions would not show a proper dialog for sign-in. Try
export QTWEBENGINE_CHROMIUM_FLAGS=--disable-seccomp-filter-sandbox
```
+## Update certificate
+
+When the certificate expires you can download the new one with:
+
+* Navigate with browser to https://uthscvpn1.uthsc.edu/. Inspect the certificate in the browser (lock icon next to search bar) and export .pem file
+* Move it to /usr/local/share/ca-certificates (with .crt extension) or equivalent
+* On Debian/Ubuntu update the certificate store with update-ca-certificates
+
+Thanks Niklas. See also
+
+=> https://superuser.com/a/719047/914881
+
## Acknowledgement
Many thanks to Pjotr Prins and Erik Garrison without whose earlier work this guide would not be possible.