where is the private cert?

[r3k2]

So I am using a email client that does not have the option to accept an untrusted cert even if is local, such I like, and why I use this client... so I need the cert protonmail-bridge is using to create the local cert so I can add it to my system keys so it sees it as valid... where can I find this?
I am looking around and cant see this info, or in the FAQ and Im starting to get worried, and before I write a blog post about this, that there is no way for a user to get the original signing key to create the local cert I want to ask where can I get this key?
I sent an email to support 1 week a go, no reply. mute silence...

[jameshoulahan]

Apologies that you received no reply from support. I'll follow up with our customer support team to see what happened there.

The location of the cert depends on which platform you're using.

• Linux: ~/.config/protonmail/bridge/{cert,key}.pem (unless XDG_CONFIG_HOME is set, in which case that is used as your ~/.config)
• macOS: ~/Library/ApplicationSupport/protonmail/bridge/{cert,key}.pem
• Windows: %APPDATA%\protonmail\bridge\{cert,key}.pem

I will put this (and other useful files) in the Readme.

[tareefdev]

I have installed and configured the Bridge on OpenSUSE TW, but still I cannot find the private cert file.

tareef@localhost:~/.config/protonmail/bridge-v3> ls
vault.enc  keychain.json

[jameshoulahan]

Hi there, on Bridge v3 the TLS cert is stored securely in the vault. You can export it like so:

[tareefdev]

Thanks!

[rigg77]

Hi there, on Bridge v3 the TLS cert is stored securely in the vault. You can export it like so:

"Screenshot 2023-03-01 at 10 01 52"

What if we want to export in the CLI? I'm trying to get bridge running on a headless server.

[LBeernaertProton]

You can also use the CLI mode (bridge --cli) to export the certificate.

[rigg77]

You can also use the CLI mode (bridge --cli) to export the certificate.

Can you provide instructions? I've not seen it in any of the documentation available online.

[danieleperera]

When I try to export-tls-cert via CLI, it seems that the bridge doesn't recognize a correct path.
It keeps asking for a path and after 3 attempts, it does not export the certificate.

[LBeernaertProton]

@danieleperera You need to pass a path to an existing directory to where the files need to be exported.

[rnek0]

can you please put a scrolling system in the v3.8.1 application to get the certificate, I have to put in full screen in 1920x1080 resolution with Archlinux and i3wm, and even like that it's just if I I have everything.