Installing certificates

Linux

To start off, you’ll need to pull the CA certificate from the Core. If you have ssh access to the Core, you can use the scp command to pull the certificate:

scp user@core:/path/to/ca.crt /tmp/synnax-ca.crt

On Debian and Ubuntu, copy the certificate into the local CA directory and rebuild the trust bundle:

sudo cp /tmp/synnax-ca.crt /usr/local/share/ca-certificates/synnax-ca.crt
sudo update-ca-certificates

On RHEL and Fedora, use the CA trust anchors directory instead:

sudo cp /tmp/synnax-ca.crt /etc/pki/ca-trust/source/anchors/synnax-ca.crt
sudo update-ca-trust

On a machine where you can’t change the trust store, point the Driver at the certificate file instead. The Driver service and synnax-driver login read /etc/synnax/driver.env, so add:

GRPC_DEFAULT_SSL_ROOTS_FILE_PATH=/tmp/synnax-ca.crt

Add the line before you run synnax-driver login, because login checks the connection to the Core.

Windows

To start off, you’ll need to pull the CA certificate from the Core. Once you have the certificate, you can install it using the Import-Certificate command. Note that you may need to open PowerShell as an administrator to run the command.

Import-Certificate -FilePath PATH_TO_CA_CRT -CertStoreLocation Cert:\LocalMachine\Root

macOS

To start off, you’ll need to pull the CA certificate from the Core. If you have ssh access to the Core, you can use the scp command to pull the certificate:

scp user@core:/path/to/ca.crt /tmp/synnax-ca.crt

Otherwise, you can copy and paste the certificate into a new file. Open a new terminal and run the following command:

sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /tmp/synnax-ca.crt

The Driver does not read the Keychain. Point it at the certificate file instead, in the same shell that runs synnax-driver:

export GRPC_DEFAULT_SSL_ROOTS_FILE_PATH=/tmp/synnax-ca.crt