How to install Caddy's root CA on other machines on the local network

[milad]

1. The problem I’m having:

I’m trying to use a fake url (e.g. foo.home) to access a web service running on a server in my home network from other machines on my network. I’m trying to get the local https working. I have a local DNS server that resolves foo.home to the machine running Caddy and the Caddyfile has a reverse proxy with tls internal. This setup works but the problem is that my browser doesn’t trust Caddy’s root CA. I believe Caddy does install the root CA on the machine it’s running on but I’m trying to access the service from a different machine on my browser.

How can I export and install Caddy’s root CA on my other machines?

I looked in /etc/ssl/certs but I can see multiple caddy files there.

2. Error messages and/or full log output:

PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.

3. Caddy version:

v2.6.4 h1:2hwYqiRwk1tf3VruhMpLcYTg+11fCdr8S3jhNAdnPy8=

4. How I installed and ran Caddy:

a. System environment:

Ubuntu

b. Command:

PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.

c. Service/unit/compose file:

PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.

d. My complete Caddy config:

PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.

5. Links to relevant resources:

[francislavoie]

Please completely fill out the help topic template, as per the forum rules.

[matt (Matt Holt)]

Look in the data directory: Conventions — Caddy Documentation

Follow the pki folder tree.

Then copy the .crt file for the root to other systems that need it installed. Make sure it’s the cert, not the private key.

If you fill out the help template more completely like Francis mentioned, we can give more specifics help.