# kosa8 lab ca

Print the lab CA certificate, to install in images that should trust fakenet's HTTPS

## Usage

```
kosa8 ca [--out FILE]
```

fakenet's TLS responder completes every handshake with a certificate for the
name asked, issued by the lab CA. Programs that verify certificates refuse it
(the refusal and the name are still recorded) unless the CA is installed in
the image, e.g. in a Dockerfile:

  COPY kosa8-lab-ca.pem /usr/local/share/ca-certificates/kosa8-lab-ca.crt
  RUN update-ca-certificates

The CA is made on first use and kept on the daemon's host; its key never
leaves it.

## Flags

| Flag | Type | What it does | Default |
|---|---|---|---|
| `--out` | string | write the certificate to this file instead of printing it |  |

---
Source: https://docs.kosa8.com/reference/lab-ca/