kevinveenbirkenbach/computer-playbook
1
0 Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-13 06:06:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
fb2de0e6b635a4b84cd04ef58cf2fd052d4ed549
computer-playbook/scripts/system/tls/trust
T
History
Environment TestandClaude Sonnet 4.6 5c1a963d30 docs(tools): restructure security and framework docs, add cleanup workflow 
- Move flow/security/ghcr.md to tools/ghcr/authentication.md
- Move flow/security/mirror-cleanup.md to tools/ghcr/cleanup.md
- Move flow/security/branch.md to tools/github/branch.md
- Move flow/security/repository.md to tools/github/repository.md
- Move code/frameworks/ansible.md to tools/ansible.md
- Merge code/frameworks/Makefile.md into tools/make.md and extract file rules to artefact/files/makefile.md
- Rename tools/makefile.md to tools/make.md
- Add .github/workflows/images-mirror-cleanup.yml for manual GHCR cleanup
- Apply documentation.md standards: emojis on headlines, no em dashes, filename link text
- Fix all cross-references broken by directory restructuring

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 16:31:22 +02:00
..
linux.sh
Normalize scripts layout and Make targets
2026-03-28 09:00:38 +01:00
README.md
docs(tools): restructure security and framework docs, add cleanup workflow
2026-04-10 16:31:22 +02:00
wsl2.sh
Normalize scripts layout and Make targets
2026-03-28 09:00:38 +01:00

README.md

🔐 CA Trust Scripts

This directory contains platform-specific scripts for trusting the Infinito Root CA certificate on the developer's machine. For the canonical Make target index that invokes these helpers, see make.md.

All scripts extract the Root CA from a running Infinito container and install it into the appropriate system trust store, so that browsers and tools accept *.infinito.example TLS certificates without warnings.

📄 Scripts

🐧 linux.sh

Trusts the Infinito Root CA on the Linux host system.

  1. Extracts root-ca.crt from the running Infinito container via docker cp
  2. Places it under /etc/infinito.nexus/ca/root-ca.crt
  3. Installs it into the system trust store via roles/sys-ca-selfsigned/files/with-ca-trust.sh

Requires INFINITO_CONTAINER to be set to the name of the running container.

🪟 wsl2.sh

Trusts the Infinito Root CA on Windows from inside a WSL2 environment. Only executes when running on WSL2 (detected via /proc/version).

  1. Extracts root-ca.crt from the running container and copies it to the Windows Downloads folder
  2. Imports the certificate into the Windows CurrentUser Root trust store via PowerShell (no admin required)
  3. Discovers all configured domains from the nginx config inside the container
  4. Updates the Windows hosts file (C:\Windows\System32\drivers\etc\hosts) with 127.0.0.1 entries for all discovered domains (requires one UAC confirmation)

🔗 Related

  • ../. TLS administration scripts
  • roles/sys-ca-selfsigned/. generates the self-signed Root CA inside the container
Reference in new issue View Git Blame Copy Permalink