An example is the trust not supported
error starting around post #37 in the thread mTLS under FreeBSD.
{"level":"error","ts":"2021-05-10T21:41:57.226+0800","logger":"pki.ca.local","msg":"failed to install root certificate","error":"trust not supported","certificate_file":"storage:pki/authorities/local/root.crt"}
From what I understand here, for the local CA to operate, a mandatory Caddy requirement is that the root cert be installed in the local trust store.
Unless I’m reading it wrong, the SmallStep support article Getting Started, seems to suggest that having the root cert in the local trust store is an optional Smallstep requirement.
You may also wish to establish system-wide trust of your CA, so your certificates will be trusted by
curl
and other programs. Use thestep certificate install
command to install your root CA certificate into your system’s trust store:
Given the current workaround and a forthcoming fix as described in the thread Trust store issue under FreeBSD - follow-up , this suggestion is more of a 'wouldn’t it be nice to see this requirement relaxed` rather than a ‘I’m hangin’ out for this feature’.