Vagrant question

[mattkaye]

I’m running Ubuntu via vagrant on a Mac. Do I install and run this on the host or guest OS?

[nickkaczmarek]

Where is your webserver located? On macOS or Ubuntu?

[nickkaczmarek]

This might help it. https://ishan.co/ssl-vagrant-local

[mattkaye]

The web server is on Ubuntu running in virtual box. I already have followed steps like the one in the url you posted. I do have a self signed cert for each of my vhosts , but can’t get chrome to trust them . I’ve tried almost everything I can think of. I was hoping this tool would handle all that manual configuration for me and handle the keychain, but I’m not sure it will.

On Wed, Aug 22, 2018 at 7:19 PM Nick Kaczmarek ***@***.***> wrote: This might help it. https://ishan.co/ssl-vagrant-local — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#64 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ACpruQ8PY7FmcMhQNtGnSJVfDAM6v6_zks5uTebrgaJpZM4WCx0S> .

-- Regards Matt Kaye

[mrmuli]

@mattkaye I am running an Ubuntu box on MacOS and I had to install the CA in the box. So the tool is initially installed on my Mac and certs generated there but I copy over the rootCA into the box and run install and it works.

An issue I'm however facing is I can't seem to get ansible to install the root CA with the certificate I copied over. I have to manually ssh and run mkcert -install to get the box using the cert I copied over.

I hope you got help though :)

[adamdecaf]

I have to manually ssh and run mkcert -install to get the box using the cert I copied over.

Yep. Vagrant is a virtual machine, so the certs won't be installed by running mkcert on the host.

[FiloSottile]

You want to run mkcert -install on the system that is going to have to trust the certificates. So if the server runs in Vagrant and the browser on the laptop, you run mkcert -install on the host, and install the generated certificates inside the guest.

See also https://github.com/FiloSottile/mkcert#installing-the-ca-on-other-systems