I've had good luck with caman (https://github.com/radiac/caman), but it doesn't do any of the fancy certificate installation bits. This looks neat and useful.
Mkcert: Tool for making locally-trusted development certificates
11–20 of 41 posts
Re: Mkcert: Tool for making locally-trusted development certificates
#12No installation required: https://certsimple.com/blog/localhost-ssl-fix
A few clicks and 1 actual command on macOS
Re: Mkcert: Tool for making locally-trusted development certificates
#13npx tlx-keygen - No installation required, npx comes with Node.js and downloads/runs/removes the package. - Generate localhost certs with support for *.localhost, 127.0.0.1 (IPv4), ::1 (IPv6), etc. - Register in operating system trust store (Win/Lin/Mac) - Tested with major browsers (Chrome/Firefox/Safari/Edge) https://www.npmjs.com/package/tls-keygen
you would need node js installed, so that's atleast 1 installation requirement... node.js has as one of it's dependencies openSSL. So you could use openssl commands and have actually less installation requirements.
Still sounds good to me - it would do extra stuff like adding it to the Windows cert store if you're there, adding it to Firefox if you use it, etc. And being package it's better to collaborate on than everyone making their own process (and possibly screwing it up).
Since many people who run https://localhost are doing front end development node will probably already be there.
Re: Mkcert: Tool for making locally-trusted development certificates
#14No installation required: https://certsimple.com/blog/localhost-ssl-fix A few clicks and 1 actual command on macOS
The point of mkcert is so you can use it on any OS without a bunch of hoops to jump through.
Re: Mkcert: Tool for making locally-trusted development certificates
#15Earlier quoted context omitted.
you would need node js installed, so that's atleast 1 installation requirement... node.js has as one of it's dependencies openSSL. So you could use openssl commands and have actually less installation requirements.
Still sounds good to me - it would do extra stuff like adding it to the Windows cert store if you're there, adding it to Firefox if you use it, etc. And being package it's better to collaborate on than everyone making their own process (and possibly screwing it up). Since many people who run https://localhost are doing front end development node will probably already be there.
If you're on Windows then you get creating a certificate and adding it to the cert store out of the box with PowerShell[0].
[0] https://docs.microsoft.com/en-us/powershell/module/pkiclient...
Re: Mkcert: Tool for making locally-trusted development certificates
#16Earlier quoted context omitted.
I made my own variant of this as well, although it was just config files & shell scripts wrapping OpenSSL instead of being a custom binary.
Me too, but it was mostly to teach myself about OpenSSL, and I feel like the experience have scarred me for life. I mostly used the Ruby C-bindings, and I feel like finding information and documentation was very difficult, and it was even harder to figure out if there was any best practices I was missing. It baffles me that so important infrastructure is built upon something that feels this brittle, and it keeps me u…
Don’t worry, everyone who used OpenSSL APIs feels the same way as you do.
Re: Mkcert: Tool for making locally-trusted development certificates
#17JUST USE LETSENCRYPT!!!
Re: Mkcert: Tool for making locally-trusted development certificates
#18JUST USE LETSENCRYPT!!!
Does not support localhost...
Re: Mkcert: Tool for making locally-trusted development certificates
#19is there an advantage to this over using openssl or nss/certutil commands?
The main advantage to me would be "not having to remember openssl commands you use twice a year"...
seems a way to gather all kinds of extra clutter on your box. keep notes of things you do :-) it just requires a txt editor present in most operating systems by default. if you document carefuly, you can even just add #!/bin/sh in the top to automate ;D but it's atleast honest comment :D
Re: Mkcert: Tool for making locally-trusted development certificates
#20is there an advantage to this over using openssl or nss/certutil commands?
The main advantage to me would be "not having to remember openssl commands you use twice a year"...
Thats why I write a blog post to myself ;)
https://daurnimator.com/post/115624714644/howto-generate-a-s...