kevinveenbirkenbach/computer-playbook
1
0 Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-06 02:54:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
16bdbf03d7a6588db1ee28c073be699b47166193
computer-playbook/scripts/system/tls/trust/README.md
T
kevinveenbirkenbachandClaude Opus 4.7 16bdbf03d7 docs: fix repo-wide drift against documentation.md style rules 
Three classes of drift cleaned up across 85 .md files:

- Em-dashes: replaced ` — ` with the contextually correct separator
  (colon for `term: explanation`, period to split clauses across
  sentences/source lines, parentheses for asides, semicolon for
  tight-linked continuations). Two intentional exceptions remain
  in `docs/contributing/documentation.md` (the rule literal) and
  inside a fenced ```sh block in `docs/contributing/actions/debugging/ci.md`.
- SPOT self-labels: rewrote "This is the SPOT for X" to describe
  the subject directly ("This directory holds X" / "This file
  describes X"). Cross-references to other artefacts' canonical
  role remain unchanged.
- Heading-emoji position: moved leading-emoji headings (`# 🧩 Title`)
  to trailing position (`# Title 🧩`) per the headline rule that
  emojis MUST come after the title text.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-15 20:12:07 +02:00

1.6 KiB
Raw Blame History

CA Trust Scripts 🔐

This directory contains platform-specific scripts for trusting the Infinito Root CA certificate on the developer's machine. For the canonical Make target index that invokes these helpers, see make.md.

All scripts extract the Root CA from a running Infinito container and install it into the appropriate system trust store, so that browsers and tools accept *.infinito.example TLS certificates without warnings.

Scripts 📄

linux.sh 🐧

Trusts the Infinito Root CA on the Linux host system.

  1. Extracts root-ca.crt from the running Infinito container via docker cp
  2. Places it under /etc/infinito.nexus/ca/root-ca.crt
  3. Installs it into the system trust store via roles/sys-ca-selfsigned/files/with-ca-trust.sh

Requires INFINITO_CONTAINER to be set to the name of the running container.

wsl2.sh 🪟

Trusts the Infinito Root CA on Windows from inside a WSL2 environment. Only executes when running on WSL2 (detected via /proc/version).

  1. Extracts root-ca.crt from the running container and copies it to the Windows Downloads folder
  2. Imports the certificate into the Windows CurrentUser Root trust store via PowerShell (no admin required)
  3. Discovers all configured domains from the nginx config inside the container
  4. Updates the Windows hosts file (C:\Windows\System32\drivers\etc\hosts) with 127.0.0.1 entries for all discovered domains (requires one UAC confirmation)

Related 🔗

  • ../. TLS administration scripts
  • roles/sys-ca-selfsigned/. generates the self-signed Root CA inside the container
Reference in new issue View Git Blame Copy Permalink