Wiki

TLS fingerprint

The server generates a self-signed certificate at install. Each client confirms its fingerprint on first connection.

Is it secure? Yes. Every connection and every file transfer is encrypted: nobody on the network can read what travels between your workstations and your server. Your data stays on your own infrastructure: nothing is hosted by a third party, nothing passes through uVersion. Only your team members, with their own credentials, can access it. And if anything abnormal happens on the connection, the software detects it and blocks immediately, instead of letting it pass silently.

uVersion encrypts every connection with HTTPS by default, with no external domain or certificate. The server generates its cert on first startup; the admin shares the fingerprint with the team; each client confirms it once.

Find the fingerprint

Shown at the end of install, next to the admin password. Also available at any time:

# Linux
sudo cat /var/lib/uversion/data/tls/fingerprint

# Windows
Get-Content "C:\ProgramData\uVersion\data\tls\fingerprint"

Confirm on the client

The “Trust this server” dialog on first connection: compare the shown fingerprint before trusting.

Desktop client

A dialog opens on first login. Compare it with what the admin shared, and click Trust this server if it matches.

CLI `uversion`

uversion trust https://uversion.example.com:8443    # interactif
uversion trust https://uversion.example.com:8443 --yes   # non-interactif (CI / script)
uversion trusted                                    # liste les serveurs pinned
uversion login <url>                                # prompt auto si non-pinned

Unreal Engine plugin

Run uversion trust <url> once in a terminal before opening the project. (A native UE dialog is planned for later.)

Rider plugin

Uses uversion under the hood. Run uversion trust <url> once and Rider goes through.

If the fingerprint changes

The client refuses with a red message. Verify out-of-band with the admin: legitimate reinstall, deliberate rotation, or MITM. If OK:

Desktop: Trust new fingerprint button in the red dialog
CLI: uversion mistrust <url> then uversion login <url>

Regenerate the certificate

The cert is valid for 10 years by default, with no renewal needed. To force a rotation (compromise, audit):

# Linux
sudo rm /var/lib/uversion/data/tls/cert.pem /var/lib/uversion/data/tls/key.pem
sudo systemctl restart uversion-server

# Windows
Remove-Item "C:\ProgramData\uVersion\data\tls\cert.pem"
Remove-Item "C:\ProgramData\uVersion\data\tls\key.pem"
Restart-Service uVersionServer

New cert + new fingerprint on startup. Reshare with the team.