HTTPS Connection to Home Assistant (or other) with Custom CA Certificate

[Z3r10]

Introduction

I run my own CA at home, and my HA instance is signed with it.
Since latest 2.2.0 Hyperion-ng, SSL is supported but still validate the trust.
Here is small guide to import your own CA Cert.

Should also be valid for any other SSL connection.

NB: Tested on Hyperbian 2.2.0

Troubleshoot

Log is saying something like homeassistant: blabla [...] root certificate is self-signed and not trusted

Step 1: Copy CA Cert

Copy your .crt file to /usr/local/share/ca-certificates/

⚠ It MUST be with .crt extension

You can either copy via SFTP/SCP or paste it via touch + vi or nano
On Raspbian/Hyperbian, you must have SSH enabled

Step 2: Add it to Certificate Store

Run sudo update-ca-certificates to make it added to the certificate store
Verify with ls -rla /etc/ssl/certs | grep <My CA Name>

hyperion@hyperbian:~ $ ls -rla /etc/ssl/certs | grep My-CA
lrwxrwxrwx 1 root root     45 27 fév 22:28 My-CA.pem -> /usr/local/share/ca-certificates/My-CA.crt
lrwxrwxrwx 1 root root     12 27 fév 22:28 337d2517.0 -> My-CA.pem

Step 3: Restart Hyperion

1. Restart Hyperion from web interface
2. Connect again to Home Assistant