From 0b60b339902a9cfb09bfa40dbceceb76e5e89b75 Mon Sep 17 00:00:00 2001 From: dyzulk <66510723+dyzulk@users.noreply.github.com> Date: Thu, 8 Jan 2026 15:42:51 +0700 Subject: [PATCH] docs: fix linux manual download step and clarify intermediate ca usage --- pages/guide/getting-started/install-root-ca.mdx | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/pages/guide/getting-started/install-root-ca.mdx b/pages/guide/getting-started/install-root-ca.mdx index ea29c0e..c23ba8a 100644 --- a/pages/guide/getting-started/install-root-ca.mdx +++ b/pages/guide/getting-started/install-root-ca.mdx @@ -108,7 +108,10 @@ If you prefer to install certificates manually, follow these steps for your oper ### Download - Download the **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** file. + Download the certificate using `curl`: + ```bash + curl -LO https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt + ``` ### Install (Debian/Ubuntu) Copy the file to the CA directory: @@ -128,7 +131,16 @@ If you prefer to install certificates manually, follow these steps for your oper ## Intermediate Certificates -In most cases, installing the Root CA is sufficient for client trust. However, for server configuration or specific use cases, you may need the Intermediate CAs. +Intermediate certificates are used to sign end-entity certificates (servers, clients). **Clients typically do not need to install these manually**, as servers should provide them during the handshake. + +**For Server Administrators:** +To configure your web server (Nginx, Apache, IIS) with the full chain, please refer to the **[Web Server Configuration](/guide/integrations/web-servers)** guide. + +**Manual Installation (If Required):** +If you must install them manually (e.g., for offline chain validation): +* **Windows**: Follow the Root CA guide, but choose **Intermediate Certification Authorities** as the certificate store. +* **macOS**: Add to **System** keychain. +* **Linux**: Place in the same CA directory as the Root. | Certificate | Algorithm | Download | | :--- | :--- | :--- |