Commands / kosa8 lab ca

kosa8 lab ca

Print the lab CA certificate, to install in images that should trust fakenet's HTTPS

Usage

kosa8 ca [--out FILE]

fakenet's TLS responder completes every handshake with a certificate for the name asked, issued by the lab CA. Programs that verify certificates refuse it (the refusal and the name are still recorded) unless the CA is installed in the image, e.g. in a Dockerfile:

COPY kosa8-lab-ca.pem /usr/local/share/ca-certificates/kosa8-lab-ca.crt RUN update-ca-certificates

The CA is made on first use and kept on the daemon's host; its key never leaves it.

Options