From a3b44bb28ee2ef5895a4c379ed2cc53d4dd1e459 Mon Sep 17 00:00:00 2001
From: Pjotr Prins
Date: Mon, 24 Jun 2024 01:52:04 -0500
Subject: VPN comment on certificates

---
 topics/deploy/uthsc-vpn-with-free-software.gmi | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'topics/deploy/uthsc-vpn-with-free-software.gmi')

diff --git a/topics/deploy/uthsc-vpn-with-free-software.gmi b/topics/deploy/uthsc-vpn-with-free-software.gmi
index 3ef7508..914abbc 100644
--- a/topics/deploy/uthsc-vpn-with-free-software.gmi
+++ b/topics/deploy/uthsc-vpn-with-free-software.gmi
@@ -61,6 +61,18 @@ Older versions would not show a proper dialog for sign-in. Try
 export QTWEBENGINE_CHROMIUM_FLAGS=--disable-seccomp-filter-sandbox
 ```
 
+## Update certificate
+
+When the certificate expires you can download the new one with:
+
+* Navigate with browser to https://uthscvpn1.uthsc.edu/. Inspect the certificate in the browser (lock icon next to search bar) and export .pem file
+* Move it to /usr/local/share/ca-certificates (with .crt extension) or equivalent
+* On Debian/Ubuntu update the certificate store with update-ca-certificates
+
+Thanks Niklas. See also
+
+=> https://superuser.com/a/719047/914881
+
 ## Acknowledgement
 
 Many thanks to Pjotr Prins and Erik Garrison without whose earlier work this guide would not be possible.
-- 
cgit v1.2.3