mkcert

Setup Commands

Install mkcert's local Certificate Authority into your system and browser trust stores.

8 commands

Pro Tips

Run mkcert -install once to set up the local CA

Common Mistakes

mkcert -install requires admin/root privileges

Commands

Install CA

$ mkcert -install

Install local CA to system trust store.

Get CA root location

$ mkcert -CAROOT

Print CA root directory path.

Check installation

$ mkcert -help

Verify mkcert is installed.

Set custom CA root

$ CAROOT=/path/to/ca mkcert -install

Install CA using a custom root directory.

View CA certificate

$ openssl x509 -in "$(mkcert -CAROOT)/rootCA.pem" -text -noout

Inspect the CA certificate details.

Verify CA is trusted

$ openssl verify -CAfile "$(mkcert -CAROOT)/rootCA.pem" cert.pem

Verify a certificate against the local CA.

Check CA expiry

$ openssl x509 -in "$(mkcert -CAROOT)/rootCA.pem" -enddate -noout

Check when the CA root certificate expires.

Copy CA for Docker use

$ cp "$(mkcert -CAROOT)/rootCA.pem" ./docker/ca-cert.pem

Copy CA cert into Docker build context.