summaryrefslogtreecommitdiff
path: root/topics
diff options
context:
space:
mode:
Diffstat (limited to 'topics')
-rw-r--r--topics/deploy/uthsc-vpn-with-free-software.gmi13
1 files changed, 13 insertions, 0 deletions
diff --git a/topics/deploy/uthsc-vpn-with-free-software.gmi b/topics/deploy/uthsc-vpn-with-free-software.gmi
index 914abbc..344772c 100644
--- a/topics/deploy/uthsc-vpn-with-free-software.gmi
+++ b/topics/deploy/uthsc-vpn-with-free-software.gmi
@@ -69,10 +69,23 @@ When the certificate expires you can download the new one with:
* Move it to /usr/local/share/ca-certificates (with .crt extension) or equivalent
* On Debian/Ubuntu update the certificate store with update-ca-certificates
+You should see
+
+```
+Updating certificates in /etc/ssl/certs...
+1 added, 0 removed; done.
+```
+
Thanks Niklas. See also
=> https://superuser.com/a/719047/914881
+On GUIX you may need to point to the updated certificates file with:
+
+```
+env REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt openconnect-sso --server uthscvpn1.uthsc.edu --authgroup UTHSC
+```
+
## Acknowledgement
Many thanks to Pjotr Prins and Erik Garrison without whose earlier work this guide would not be possible.