FiloSottile/mkcert
Mkcert
mkcert is a command-line utility designed to simplify local development by generating and managing locally-trusted development certificates. It creates a unique, self-signed root certificate authority on the local machine, which serves as a trusted source for issuing development credentials. By automating the generation of these certificates, the tool enables secure encrypted connections that browsers and operating systems accept without security warnings.
The utility distinguishes itself by automatically configuring local trust stores, programmatically injecting the generated root certificate into system and browser databases. It supports complex development workflows through environment-variable-based configuration, allowing users to manage multiple certificate authorities across different projects and specify custom storage paths. This infrastructure ensures consistent security across diverse environments, including support for mobile device trust and remote machine installation.
Beyond standard HTTPS testing, the tool provides capabilities for generating secure email certificates and integrating with specific application runtimes. It handles the underlying cryptographic key material generation and cross-platform path resolution required to maintain trust across various operating systems and development environments.
Features
- Local Certificate Authorities - Establishes a unique, self-signed root certificate and private key pair to serve as a trusted authority for local network traffic.
- Development Certificate Authorities - Produces custom, locally-trusted certificates to enable secure testing and authentication within development environments.
- Certificate Authority Managers - Coordinates certificate authority storage through environment-defined paths to organize local security assets across multiple projects.
- Root Store Configurators - Injects generated root authorities directly into system and browser trust stores to automate secure connection validation.
- Trust Store Managers - Streamlines the lifecycle of locally-trusted root certificates by automating their installation and maintenance across diverse operating systems.
- Certificate Trust Managers - Handles the complex task of registering custom root certificates within system and application trust stores to ensure seamless local HTTPS.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- Sécurité et confidentialité - Local HTTPS certificate generator.
- SSL and TLS - Zero-config tool for creating locally trusted development certificates.
- Certificate Management Integrations - Exposes file paths for generated root authorities via environment variables to simplify secure integration with local server applications.
- Key Generation Tools - Generates secure public and private key pairs tailored to specific domain names for local cryptographic operations.
- Certificate Authority Management - Synchronizes trusted root certificates across mobile, server, and desktop environments to maintain consistent security during software testing.
- Email Identity Verification - Enables the creation of S/MIME certificates to facilitate testing of signed and encrypted email communication workflows.
