saphan cert
Lets a second device trust the console's certificate, so you can sign in the Saphan Studio console from it and not only read.
Lets a second device trust the console's certificate, so you can sign in the Saphan Studio console from it and not only read. Signing needs a passkey, and a passkey only works on a page the device treats as secure. Neither command ever handles a private key.
saphan cert export
On the machine that serves the console, writes the certificate other devices must trust and prints its SHA-256 fingerprint. If the console certificate was issued by a CA, the CA is exported, so trust survives a renewal; a certificate whose issuer cannot be found is refused (console-certificate-issuer-absent). On a console without HTTPS it refuses with console-certificate-absent; create a certificate with saphan trust server-cert first. Choose exactly one of --ios or --pem.
| flag | type | default | what it does |
|---|---|---|---|
--ca | string | The issuing CA certificate (PEM or DER), when it is not in the certificate's own file or the configured client CA file; it is checked to have signed the certificate. | |
--cert | string | Read the console certificate from this PEM file instead of the one the gateway is configured with. | |
--host | string | The host name the console is reached at, used in the profile's description. Defaults to this machine's hostname. | |
--ios | bool | false | Write an iPhone and iPad configuration profile (.mobileconfig). It is unsigned and iOS will say so; the fingerprint comparison is what verifies it. |
--out | string | Write to this file instead of standard output. | |
--pem | bool | false | Write the certificate as PEM, for Android, Linux or another Mac. |
saphan cert trust
On the Mac you want to sign from, fetches the certificate another machine's console presents, prints its fingerprint, and adds it to your login keychain, trusted for SSL only, after you type its first 16 characters back. Comparing that fingerprint with the one saphan cert export printed on the console machine is the whole security of this step: the download itself is not verified. A mismatch is refused and nothing is written. macOS only.
| flag | type | default | what it does |
|---|---|---|---|
--confirm | string | The first 16 hex characters of the fingerprint, given here instead of typed at the prompt. Only use it with a fingerprint you have checked against the console machine. | |
--host | string | The machine serving the console, for example console-host.local. Required. |
Global options apply to every command — see Every command.
saphan ceremony
The owner's key ceremonies when a team is set up: creating the root key, which is kept only on paper, and the intermediate key used to issue machine certificates.
saphan certify
Runs the repository's full verification suite against the current tip of the local trunk branch, in a detached scratch worktree on this machine with your own permissions, and records the result agains