LAN setup, image fixes, misc edits

This commit is contained in:
kn0wmad
2022-01-26 21:05:07 -07:00
committed by Lucy Cifferello
parent 1058083bc4
commit 5aed44dc54
59 changed files with 86 additions and 91 deletions

View File

@@ -1,8 +1,8 @@
.. _lan-browser:
======================
LAN Setup for Browsers
======================
====================
LAN Setup - Browsers
====================
When you are on the same network as your Embassy (typically a home or small office), :ref:`Local Access<lan>` is much faster and will allow access to your data, even with no Internet connection.

View File

@@ -4,15 +4,19 @@
Firefox
=======
#. Navigate to your Firefox Settings in a new tab.
#. Open Firefox and in a new tab select ``Settings`` from the right-hand hamburger menu:
.. figure:: /_static/images/tor/os_ff_settings.svg
:width: 30%
:alt: Firefox options screenshot
#. Select “Privacy and Security” from the left hand navigation menu.
#. Scroll all the way to the bottom of the page and select “View Certificates”.
.. figure:: /_static/images/ssl/browser/firefox_security_settings.png
:width: 90%
:alt: Firefox security settings
.. figure:: /_static/images/ssl/browser/firefox_security_settings.svg
:width: 80%
:alt: Firefox security settings
Firefox privacy and security settings page
@@ -22,18 +26,14 @@ Firefox
#. When prompted, check “Trust this CA to identity websites” and select “OK”.
.. figure:: /_static/images/ssl/browser/firefox_security_settings.png
:width: 90%
:alt: Firefox import cert
.. figure:: /_static/images/ssl/browser/firefox_view_certs.svg
:width: 80%
:alt: Firefox import cert
Firefox import certificate page
#. Ensure the “Embassy Local Root CA” exists under “Start9 Labs”.
#. Click “OK” to save.
#. Ensure the “Embassy Local Root CA” exists under “Start9 Labs”. Then click “OK” to save.
#. Open a new tab in Firefox to apply the changes. If this does not work, quit and restart Firefox.
#. Navigate to the LAN address provided in the Setup App.
#. You can now securely navigate to your Embassy over HTTPS!
#. Navigate to the LAN address provided at setup, or in the :ref:`Embassy tab<embassy-tab>` -> LAN. You can now securely navigate to your Embassy over HTTPS!

View File

@@ -4,4 +4,4 @@
Safari
======
Once you have completed the steps to install a SSL certificate on your device, simply open a new tab to apply the changes. If this does not work, quit and restart Safari. You can now securely navigate to the LAN address for your Embassy!
Once you have completed the :ref:`LAN Setup<lan-os>` steps on your device, simply open a new tab to apply the changes. If this does not work, quit and restart Safari. You can now securely navigate to the LAN address for your Embassy!

View File

@@ -1,8 +1,8 @@
.. _lan-os:
=====================
LAN Setup for Devices
=====================
===================
LAN Setup - Devices
===================
When you are on the same network as your Embassy (typically a home or small office), :ref:`Local Access<lan>` is much faster and will allow access to your data, even with no Internet connection.

View File

@@ -4,62 +4,52 @@
Mac
===
#. Visit your Embassy at its Tor Address.
#. Visit your Embassy at its Tor Address (for security purposes), and navigate to the :ref:`Embassy tab<embassy-tab>` -> LAN
#. Navigate to --> Embassy --> Connect Over LAN
.. figure:: /_static/images/ssl/macos/embassy_lan_setup.svg
:width: 60%
:alt: LAN setup menu item
.. figure:: /_static/images/embassy_lan_setup.png
:width: 90%
:alt: LAN setup menu item
#. Click "Download Root CA". This will prompt a download to save the certificate file to your machine.
Select the "Connect over LAN" menu item
.. figure:: /_static/images/ssl/macos/embassy_lan_setup0.svg
:width: 60%
:alt: LAN setup page
#. Select the "Root Certificate Authority" sub menu. This will prompt a download to save the certificate file to your machine.
#. Select the option to ``Open with`` "Keychain Access" and select ``OK``. If you choose to save the file, double click on it once downloaded.
.. figure:: /_static/images/secure_lan_setup_page.png
:width: 90%
:alt: LAN setup page
.. figure:: /_static/images/ssl/macos/embassy_lan_setup1.svg
:width: 60%
:alt: LAN setup prompt
Select the "Root Certificate Authority" sub menu
#. Enter your computer password when prompted. It will be imported into your mac's keychain.
#. Select the option to open your key with Keychain Access. If you choose to save file, double click on it once downloaded.
.. figure:: /_static/images/ssl/macos/certificate_untrusted.svg
:width: 60%
:alt: Keychain access import menu
.. figure:: /_static/images/secure_lan_setup_prompt.png
:width: 90%
:alt: LAN setup prompt
Keychain access import menu
Open with "Keychain Access" and select "OK"
.. note:: If the keychain console did not open, press "Command + spacebar" and type “Keychain Access”, and hit enter to open it.
#. Enter your computer password when prompted. It will be imported into your computer's keychain.
#. Navigate to the "System" tab on the left, find the certificate entitled “Embassy Local Root CA”, and double click on this certificate. A second window will pop up.
.. figure:: /_static/images/ssl/macos/certificate_untrusted.png
:width: 90%
:alt: Keychain access import menu
#. Open the “Trust” dropdown and select “Always Trust” from the dropdown next to “When using this certificate”.
Keychain access import menu
.. figure:: /_static/images/ssl/macos/always_trust.svg
:width: 60%
:alt: Keychain submenu
#. If the keychain console did not open, press "Command + spacebar" and type “Keychain Access”, and hit enter to open it.
#. Navigate to the "System" tab and find the certificate entitled “Embassy Local Root CA”.
#. Double click on this certificate. A second window will pop up.
#. Open the “Trust” dropdown and select “Always Trust” from the dropdown next to “when using this certificate”.
.. figure:: /_static/images/ssl/macos/always_trust.png
:width: 90%
:alt: Keychain submenu
Select "Always trust" under SSL dropdown for Embassy Local CA
Select "Always trust" under the "Trust" dropdown for Embassy Local CA
#. Close this window and enter your password to apply the settings.
#. The “Embassy Local Root CA” cert will now read “This certificate is marked as trusted for all users” in Keychain Access.
.. figure:: /_static/images/ssl/macos/certificate_trusted.png
:width: 90%
:alt: Keychain menu trusted certificate
.. figure:: /_static/images/ssl/macos/certificate_trusted.svg
:width: 60%
:alt: Keychain menu trusted certificate
Trusted Embassy Local CA certificate
Trusted Embassy Local CA certificate
#. Open your favorite browser to import this certificate and follow the steps for :ref:`browser setup <lan-browser>`.
#. Open your favorite browser and follow the steps for :ref:`browser setup <lan-browser>` to complete LAN setup.