Mkcert: Simple zero-config tool to make locally trusted development certificates

Re:Mkcert: Simple zero-config tool to make locally trusted d... by dainiusse on Monday October 31, 2022 @04:52PM (#33412901)

This should be part of openssl :)

[ Parent | on HN ]

Re:Mkcert: Simple zero-config tool to make locally trusted d... by talideon on Monday October 31, 2022 @08:42PM (#33415478)

You can do this kind of thing with OpenSSL, but it's... arcane.

[ Parent | on HN ]

Re:Mkcert: Simple zero-config tool to make locally trusted d... by kevin_thibedeau on Monday October 31, 2022 @11:51PM (#33416678)

I have it boiled into a few shell scripts that generate the cnf files needed. OpenSSL has improved its CLI beyond the old Perl script that had long been used for running a local CA and you get fine grained control over what features you want.

[ Parent | on HN ]

Re:Mkcert: Simple zero-config tool to make locally trusted d... by ptcrash on Thursday November 03, 2022 @09:18PM (#33460459)

It's not just arcane it's a horrible idea from an infosec perspective. Thinking about all my wonderful developers having local trusted root CAs just sitting on their hard drives is making my blood pressure skyrocket.

[ Parent | on HN ]