From 8198ffdb9b1d12f2460d8931b92e10fba72c57e9 Mon Sep 17 00:00:00 2001 From: Brandon Rozek Date: Sat, 30 Aug 2025 16:12:32 -0400 Subject: [PATCH] Add bit about Fedora --- content/blog/accessing-homelab-services-mtls.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/content/blog/accessing-homelab-services-mtls.md b/content/blog/accessing-homelab-services-mtls.md index fec2b20..6081db2 100644 --- a/content/blog/accessing-homelab-services-mtls.md +++ b/content/blog/accessing-homelab-services-mtls.md @@ -149,9 +149,12 @@ When running this command, it'll ask for an export password. You'll need to reme Before we can import `user.pfx` on our favorite device, we need to have our device trust the root certificate authority. Since we created our own and didn't go through a CA like Let's Encrypt, devices will not trust the certificates by default. +On Fedora, copy `ca.pem` to `/etc/pki/ca-trust/source/anchors/` and then run `sudo update-ca-trust`. + On Android you can import `ca.pem` via `More security & privacy > Encryption & credentials -> Install a certificate -> CA certificate`. -Then you can install `user.pfx` via `More security & privacy > Encryption & credentials -> Install a certificate -> VPN & app user certificate`. +After install the CA public certificate, we can install `user.pfx` via `More security & privacy > Encryption & credentials -> Install a certificate -> VPN & app user certificate`. On Fedora, you can do this within Firefox. + ### Nginx Authenticated Proxy Setup