diff options
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 27 |
1 files changed, 25 insertions, 2 deletions
@@ -55,12 +55,35 @@ $ make bootstrap ANSIBLE_USER=root ANSIBLE_PORT=22 The subdomain `hollyhock` is secured with mTLS - once the `devops` playbook is run succesfully, on macOS you need to add -`tmp/hollyhock.p12` to your keychain: +`tmp/hollyhock.p12` to your keychain (see troubleshooting before +attempting an import): ```sh -$ security import tmp/hollyhock.p12 -k ~/Library/Keychains/login.keychain-db -P <mtls_p12_password> +$ security import tmp/hollyhock.p12 \ + -k ~/Library/Keychains/login.keychain-db \ + -P <mtls_p12_password> ``` +#### Troubleshooting + +mTLS can be a little finicky. Here are some things to try +(tips are macOS specific). + +If you have any specific applications you know will need to access the +key (like your web browser), you can specify it on import `-T`: + +```sh +$ security import tmp/hollyhock.p12 \ + -k ~/Library/Keychains/login.keychain-db \ + -P <mtls_p12_password> + -T /Applications/Google\ Chrome.app +``` + +If you've imported multiple times, you may want to clear out the old +certificates directly in Keychain Access before re-importing: + + + ## CI / deployments There is a CI workflow that runs the same pre-commit hooks on GitHub as |