Hacker News Reader

If you would prefer to listen to TLS directly, or don't want to use Docker, a great alternative is mkcert: https://github.com/FiloSottile/mkcert

It automates creating a self-signed certificate and having it trusted in your local cert stores. I've always missed something when doing it by hand, so it's a great automation tool.

View on HN

Thank you for the hint. Last time I needed to do this I wrote a script which basically does the same without being that versatile.

It helped to understand more about local cert storage (e.g. cert9.db) etc. but I prefer using a tool like this which is maintained by the community and probably still works some years from now.

I did the same, localdots started actually as a simple script using mkcert for solo projects. :)

Unless I'm forgetting something now, the only reason I switched to smallstep was for ACME support which mkcert lacks for now (see https://github.com/FiloSottile/mkcert/issues/154).

I wanted an ACME solution to better automate the server config with Caddy.

Reply on news.ycombinator.com