Title here
Summary here
Verify PiRogue self-signed certificate
Requirements
- PiRogue installation is done
PUBLIC_EXTERNAL_ADDRESSandEXTERNAL_ADDRESSare different (See Administration concepts)- Public external access is not enabled
During the process of accessing the dashboard the first time, you may want to double-check the served certificate.
... in 3 steps
Get the certificate from PiRogue
pirogue-admin-client external-network get-administration-certificateExemple of self-signed certificate served by the PiRogue
pi@pirogue ➜
# Exemple of self-signed certificate served by the PiRogue
pi@pirogue ➜
pirogue-admin-client external-network get-administration-certificate
-----BEGIN CERTIFICATE----- MIIFEzCCAvugAwIBAgIUfTzacQ5PeZGLFhjD+XVVlLVmLiowDQYJKoZIhvcNAQEL BQAwGTEXMBUGA1UEAwwOdmlyb2d1ZTEubG9jYWwwHhcNMjUwNDI0MTMxNzQ0WhcN MjYwNDI0MTMxNzQ0WjAZMRcwFQYDVQQDDA52aXJvZ3VlMS5sb2NhbDCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALaknXSyn1ez1GeWGzf1M9ZDLRuLGbHW SkQF3fiG4txVuRFLtnvQXKEw/duvIWeacE1q7Sn1zf9GfMOyykcJZkbr/LlXq6rb 33IniBhpTze1FokinhkKSXTng4H4Gf9HJGIywIMSa887x8B9o3C+/7S/EAbDnDwf GtmG2Y3Aeeiu9jqWQt38PTcYlv5Plgt+5L1KCPY2rO2PvG2DG+o3tD2NoJjdisOH JxZoP+hYLOY9Zc+k/h1v5OmZ8uzo4zhPYoLrNLmSDPgR6yMdhgwU+j2063bW1tlX QsPgoyiNI6waQbJ297lefPqdgUdqeM9Lq2s5k1z6ZajAoiLmfYBR+UDAnVRkF+gd kV0VYzIk9UUpctIQU98OR/RNN3pFUyBxhXwqBd5wiA3gPn4dN1MteG8xs0h6reCV 6QjOKyXPpfHTmFO1Q+p2Vyq8d/7mrZAxl0fjinKpeDJK7qc/m4QKcE48m0XbER07 0+q2OXelXYNOBogMGdz6juRLcDwbP1lbDCL5MZYjbDSpQ9hAPLfnEuk5XshqDYRz H0ibpv/fueRtx0G2bfx48W7Gtti891dv32zdj46hJHm1el4Z3PnZxP76spQX5WCi oOCaIeMz+t7sOE2xxPkXYI9quc3+PlyNJoGEkFwwMpXzC6X3KPb1H/KJUjdu2sL9 4Wn4OeSwMa6bAgMBAAGjUzBRMB0GA1UdDgQWBBSRrY+JHValIPmcqXujoRvONfsK zjAfBgNVHSMEGDAWgBSRrY+JHValIPmcqXujoRvONfsKzjAPBgNVHRMBAf8EBTAD AQH/MA0GCSqGSIb3DQEBCwUAA4ICAQAEeMrpI6NVm7ZIIiZTRPQar6zeS6Mdium0 aZeWmXDyysK0HtTKsqLwMgM7qpWNtmcarqMNtIe63IYq/x8vAT4pnx3Swj3Y5Xtw R6yyrdu56BtxiIWa/E/oT5OI1jpUn5qR7pwLbZQjnnhfeLAjQbjDu3IcD7mYHCLf vs2IouhFWYCdsSlUIxwstpAopghxyjoA+XwH/UL6SxlD7z/IsMHmC4rPgGQf5kiM qNf/Mqh+FgM2RD/iWhlLDohQIRoNcf2CCeKH9XBOakqAvnfgi6ZJbmBchm1YvKaU jPCtWTow0pu0J1tK/1kcsPVEyNHCaH+ZfzEiSVgAqXGjrT1T0cSFmy3mjpy1wLIb WEjCa4qe/7fRHqHG5/7MEgZY+jmejSKD3FjIROYl7ZewddXNfOs+f/zeYhECQhRm hFpgd5+wLlFkTkL6gwxW8eIVxYheHFQIN00OWYMksYeI4xGQlLkmCaJymSrrHnAf byZqG8kV086/14N/bRAlI3yS7epwhR3N/cUF+9jhYVStr3z3FJYJ8U3rsaHRw51g UQx4IpyaIFQjEQ/ETtWJ7qtL83zsvmvxMRz8iTkY2dil5PTti2X9Sj9hvW9J/Heq 2CJwYQbOKmAEF4w7NDKU/YC+1u2qgddAhvkFIzkg10e44pR3EO1wqrxDB07ps7sb T48lIZ+zoA== -----END CERTIFICATE-----
pi@pirogue ➜
|
Get the certificate from browser
When accessing the service the first time:
- Click on
View certificateto examine the current certificate
- Then click on
PEM (cert)to download and the certificate on your computer
- Click on the
Not securebadge - Click on
Certificate details
- Click on the
Detailstab - Then click on the
Export...button then save the certificate on your computer
Unfortunately, there is not any simple way to retrieve trusted self-signed file.
Please refer to Apple Safari documentation to download the
.pem file stored on your system.Compare certificates
Open the previous saved browser certificate in any text editor and compare its content to the output
of the command-line pirogue-admin-client external-network get-administration-certificate you got initially.