Trusting Your Root CA on Linux¶

These instructions will work for most Debian-based Linux distributions, such as Debian, Linux Mint, PopOS, Ubuntu, etc.

1. Ensure you have downloaded your Root CA

2. Perform the following commands in the Terminal:

   sudo apt update
   sudo apt install -y ca-certificates p11-kit
   

3. Move into the folder where you downloaded your Start9 server’s Root CA (usually ~/Downloads), and run the following commands to add your Start9 server’s CA certificate to the OS trust store:

   Caution

   BE CERTAIN to replace adjective-noun with your server’s unique hostname in the 3rd and 4th commands below!

   cd ~/Downloads
   sudo mkdir -p /usr/share/ca-certificates/start9
   sudo cp "adjective-noun.crt" /usr/share/ca-certificates/start9/
   sudo bash -c "echo 'start9/adjective-noun.crt' >> /etc/ca-certificates.conf"
   sudo update-ca-certificates
   

   In the output it should say 1 added if it was successful. For most applications, you will now be able to securely connect via https.

If you are using Firefox, complete this final step

If you are using Chrome or Brave, complete this final step

1. Ensure you have downloaded your Root CA

2. From the folder you have downloaded your Start9 server’s Root CA, run the following commands. Take care to replace adjective-noun with your server’s unique adjective-noun combination in the command below. If you have changed the certificate’s filename, be sure to change it here.

   sudo pacman -S ca-certificates
   sudo cp "adjective-noun.crt" /etc/ca-certificates/trust-source/anchors/
   sudo update-ca-trust
   

   Despite no output from the last command, you can test your app right away.

1. Ensure you have downloaded your Root CA

2. In /etc/systemd/resolved.conf, ensure you have MulticastDNS=Yes

3. Restart systemd-resolved

   sudo systemctl restart systemd-resolved
   

4. From the folder you have downloaded your Start9 server’s Root CA, run the following commands. Take care to replace adjective-noun` with your server’s unique adjective-noun combination in the command below. If you have changed the certificate’s filename, be sure to change it here.

   sudo yum install ca-certificates
   sudo cp "adjective-noun.crt" /etc/pki/ca-trust/source/anchors/
   sudo update-ca-trust