Hacker News Reader

Comment by sebastiaand | Hacker News Reader

  npx tlx-keygen

- No installation required, npx comes with Node.js and downloads/runs/removes the package.

- Generate localhost certs with support for *.localhost, 127.0.0.1 (IPv4), ::1 (IPv6), etc.

- Register in operating system trust store (Win/Lin/Mac)

- Tested with major browsers (Chrome/Firefox/Safari/Edge)

https://www.npmjs.com/package/tls-keygen

View on HN

you would need node js installed, so that's atleast 1 installation requirement... node.js has as one of it's dependencies openSSL. So you could use openssl commands and have actually less installation requirements.

Still sounds good to me - it would do extra stuff like adding it to the Windows cert store if you're there, adding it to Firefox if you use it, etc. And being package it's better to collaborate on than everyone making their own process (and possibly screwing it up).

Since many people who run https://localhost are doing front end development node will probably already be there.

If you're on Windows then you get creating a certificate and adding it to the cert store out of the box with PowerShell[0].

[0] https://docs.microsoft.com/en-us/powershell/module/pkiclient...

That's really useful - and worth submitting as a separate post.

> it would do extra stuff like adding it to the Windows cert store if you're there, adding it to Firefox if you use it, etc

This is what mkcert does (FF on Windows not done yet, but FF everywhere else and OS root store is).

> And being package it's better to collaborate on than everyone making their own process (and possibly screwing it up)

Not sure the difference between it being an npm package or a Go project on GitHub is that large. Or are you saying "go build" is easier to screw up than "npm install"?

EDIT: My mistake, misunderstood the context of the comment.

> This is what mkcert does

> Not sure the difference between it being an npm package or a Go project on GitHub is that large.

I know mkcert also does this. I also agree that other maintained projects are good too. My comment was in response was to it's parent, which reads:

> So you could use openssl commands and have actually less installation requirements.

Reply on news.ycombinator.com