dyzulk/trustlab-docs
1
0
Fork 0
mirror of https://github.com/dyzulk/trustlab-docs.git synced 2026-01-26 05:25:38 +07:00
Code Issues Packages Projects Releases Wiki Activity

docs: merge intermediate ca instructions into main manual guide tabs

Browse Source
This commit is contained in:
dyzulk
2026-01-08 15:45:33 +07:00
parent 0b60b33990
commit f093b7a601
1 changed files with 34 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files

81
pages/guide/getting-started/install-root-ca.mdx
View File

@@ -60,63 +60,68 @@ If you prefer to install certificates manually, follow these steps for your oper
<Tabs items={['Windows', 'macOS', 'Android', 'Linux']}> <Tabs items={['Windows', 'macOS', 'Android', 'Linux']}>
<Tabs.Tab> <Tabs.Tab>
<Steps> <Steps>
### Download the Certificate ### Download Certificates
Download the **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** file. Download the certificates you need:
* **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** (Required)
* [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
* [Intermediate CA - 2048 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)
### Open Certificate ### Install Root CA
Double-click the downloaded `dydev-its-true.crt` file. Click **"Install Certificate"**. Double-click `dydev-its-true.crt` -> **Install Certificate**.
Select **Local Machine** -> Place in **Trusted Root Certification Authorities**.
### Select Store Location ### Install Intermediates (Optional)
Select **"Local Machine"** (Requires Admin rights) and click Next. If installing Intermediates:
Double-click the file -> **Install Certificate**.
### Browse Certificate Store Select **Local Machine** -> Place in **Intermediate Certification Authorities**.
Choose **"Place all certificates in the following store"** and click **Browse**.
Select **Trusted Root Certification Authorities**.
### Finish
Click Next and Finish. The certificate is now installed system-wide.
</Steps> </Steps>
</Tabs.Tab> </Tabs.Tab>
<Tabs.Tab> <Tabs.Tab>
<Steps> <Steps>
### Download ### Download Certificates
Download the **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** file. * **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)**
* [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
* [Intermediate CA - 2048 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)
### Add to Keychain ### Add to Keychain
Double-click the file to open **Keychain Access**. Double-click all downloaded files to open **Keychain Access**.
Select the **System** keychain. Ensure they are added to the **System** keychain.
### Trust the Certificate ### Trust Root CA
Double-click the "DyDev Its True" (Root CA) in the list. Find "DyDev Its True" (Root CA) in the list.
Expand the **Trust** section. Expand **Trust** -> Change to **Always Trust**.
Change "When using this certificate" to **Always Trust**. *(Intermediates do not need manual trust settings if Root is trusted)*.
</Steps> </Steps>
</Tabs.Tab> </Tabs.Tab>
<Tabs.Tab> <Tabs.Tab>
<Steps> <Steps>
### Download ### Download Certificates
Download the **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)** or **[DER Format](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.der)**. * **[Root CA (.crt)](https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt)**
* [Intermediate CA - 4096 (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)
### Install via Settings ### Install via Settings
Go to **Settings** > **Security** > **Encryption & Credentials**. Go to **Settings** > **Security** > **Encryption & Credentials**.
Tap **Install a certificate** > **CA Certificate**. Tap **Install a certificate** > **CA Certificate**.
Select and install the Root CA first, then the Intermediates.
### Select File
Select "Install anyway" if prompted, then choose the downloaded file.
</Steps> </Steps>
</Tabs.Tab> </Tabs.Tab>
<Tabs.Tab> <Tabs.Tab>
<Steps> <Steps>
### Download ### Download
Download the certificate using `curl`: Download the files using `curl`:
```bash ```bash
# Root CA
curl -LO https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt curl -LO https://cdn.trustlab.dyzulk.com/ca/dydev-its-true.crt
# Intermediates
curl -LO https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt
curl -LO https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt
``` ```
### Install (Debian/Ubuntu) ### Install (Debian/Ubuntu)
Copy the file to the CA directory: Copy all `.crt` files to the CA directory:
```bash ```bash
sudo cp dydev-its-true.crt /usr/local/share/ca-certificates/trustlab-root.crt sudo cp *.crt /usr/local/share/ca-certificates/
``` ```
### Update Store ### Update Store
@@ -129,21 +134,3 @@ If you prefer to install certificates manually, follow these steps for your oper
</Tabs.Tab> </Tabs.Tab>
</Tabs> </Tabs>
## Intermediate Certificates
Intermediate certificates are used to sign end-entity certificates (servers, clients). **Clients typically do not need to install these manually**, as servers should provide them during the handshake.
**For Server Administrators:**
To configure your web server (Nginx, Apache, IIS) with the full chain, please refer to the **[Web Server Configuration](/guide/integrations/web-servers)** guide.
**Manual Installation (If Required):**
If you must install them manually (e.g., for offline chain validation):
* **Windows**: Follow the Root CA guide, but choose **Intermediate Certification Authorities** as the certificate store.
* **macOS**: Add to **System** keychain.
* **Linux**: Place in the same CA directory as the Root.
| Certificate | Algorithm | Download |
| :--- | :--- | :--- |
| **TrustLab Intermediate CA** | RSA 4096 | **[Download (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-4096.crt)** |
| **TrustLab Intermediate CA** | RSA 2048 | **[Download (.crt)](https://cdn.trustlab.dyzulk.com/ca/trustlab-intermediate-ca-2048.crt)** |