News for hackers. Stuff that matters.

A comment on Mkcert: Simple zero-config tool to make locally trusted development certificates. Parent comment

Re:Mkcert: Simple zero-config tool to make locally trusted d... by talideon on Monday October 31, 2022 @08:42PM (#33415478)
You can do this kind of thing with OpenSSL, but it's... arcane.
[ Parent | on HN ]
Re:Mkcert: Simple zero-config tool to make locally trusted d... by kevin_thibedeau on Monday October 31, 2022 @11:51PM (#33416678)
I have it boiled into a few shell scripts that generate the cnf files needed. OpenSSL has improved its CLI beyond the old Perl script that had long been used for running a local CA and you get fine grained control over what features you want.
[ Parent | on HN ]
Re:Mkcert: Simple zero-config tool to make locally trusted d... by ptcrash on Thursday November 03, 2022 @09:18PM (#33460459)
It's not just arcane it's a horrible idea from an infosec perspective. Thinking about all my wonderful developers having local trusted root CAs just sitting on their hard drives is making my blood pressure skyrocket.
[ Parent | on HN ]