Hasper internal CA

Internal Hasper hosts use certificates signed by HasperInternalCA. Install this certificate once on each device, and browsers and tools will trust those hosts without warnings.

Download hasper-internal-ca.crt

Before trusting it, check the SHA-256 fingerprint shown by your system matches:
46:75:7E:86:FA:15:7D:BE:78:79:BE:3D:C8:2E:FC:EA:B0:57:EF:34:48:DE:82:95:0B:BF:68:EF:8F:D9:1F:F0
Subject O=Hasper, CN=HasperInternalCA, valid until 3 November 2036.

macOS

Double-click the file, add it to the System keychain, then open it in Keychain Access and set When using this certificate to Always Trust. Or in Terminal:

sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain \
  ~/Downloads/hasper-internal-ca.crt

Windows

Double-click the file, choose Install Certificate, Local Machine, and place it in Trusted Root Certification Authorities. Or in an administrator PowerShell:

certutil -addstore -f Root $env:USERPROFILE\Downloads\hasper-internal-ca.crt

Linux

Debian and Ubuntu:

sudo cp hasper-internal-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

Fedora, RHEL and Arch:

sudo trust anchor --store hasper-internal-ca.crt

iPhone and iPad

Open this page in Safari and download the file, then go to Settings, General, VPN & Device Management and install the profile. Finally enable it under Settings, General, About, Certificate Trust Settings.

Android

Download the file, then go to Settings, Security, More security settings, Encryption & credentials, Install a certificate, CA certificate. Menu names vary by vendor.

Firefox

Firefox keeps its own list. Either set security.enterprise_roots.enabled to true in about:config so it uses the system store, or import the file under Settings, Privacy & Security, Certificates, View Certificates, Authorities, and tick Trust this CA to identify websites.

Command-line tools

Most tools follow the system store once it is installed. For one-off use: curl --cacert hasper-internal-ca.crt https://..., or set SSL_CERT_FILE, NODE_EXTRA_CA_CERTS or REQUESTS_CA_BUNDLE to the file.