moOde App - Add to Home screen & HTTPS

[the_bertrum]

1. Modify the cert template in /var/www/util/gen-cert.sh to specify CA:TRUE

Code:

basicConstraints        = critical, CA:TRUE

Well, sort of...  This will work but you are turning up at immigration and instead of presenting a passport, you are presenting a document that claims you are the passport office.  Immigration would take you to the police, browsers ask the user if they really want to let this dodgy geezer into the country.  So you will get a warning which you can accept, it works thereafter, but you have been warned.

2. In /var/www/header.php uncomment / reenable the site.webmanifest file

Code:

    <!--link rel="manifest" href="/site.webmanifest"-->

3. Contents of site.webmanifest (does it need to be modified?)

Code:

{
   "name": "",
   "short_name": "",
   "icons": [
       {
           "src": "/v5-android-chrome-192x192.png",
           "sizes": "192x192",
           "type": "image/png"
       },
       {
           "src": "/v5-android-chrome-512x512.png",
           "sizes": "512x512",
           "type": "image/png"
       }
   ],
   "theme_color": "#ffffff",
   "background_color": "#ffffff",
   "display": "standalone"
}

I suspect the manifest might have an effect on "Chromium but not Chrome" browsers on Android.  I'll run some tests.  It does work well enough without the manifest however.

4. Create step-by-step instructions for installing the cert into Android and IOS Smartphone/Tablet operating systems.

5. Create step-by-step instructions for installing the cert into Desktop Linux/MacOS/Windows operating systems.

I've already got these in my post about setting up a CA. I'll extract them into a document that can be prettied.

Some questions:

1. Whats the purpose of the webmanifest file?
2. Does "Add to Home Screen" on IOS require HTTPS?

1. As Kent said, it allows some options but I'll test what the actual effect is on my systems.  It isn't essential in order to get a useable solution though.
2. I don't believe it does (for now, they may change their minds later).  My wife won't let me play with her phone to try this out because I broke her email last time I played with certificates and things on it.