Unclaimed project
Are you a maintainer of mkcert? Claim this project to take control of your public changelog and roadmap.
Changelog
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
Last updated about 2 years ago
latest endpoints (e.g., `https...The EKU logic is now simpler, and it follows the following rules
-client is used, clientAuth is includedCertificate generation based on CSRs is now consistent with standard certificate generation.
Releases are now built from GitHub Actions...
The Go import path of the module is now filippo.io/mkcert, which should only affect users installing the tool with go get, which was never a recommended installation method.
Note: packagers building from source now need to set the version like -ldflags "-X main.Version=$VERSION"
sudo when necessary to install in system-wide NSS stores (#192)-version flag (#191)macOS 10.15 Catalina introduced certificate lifespan limits which block mkcert certificates. As a temporary measure, mkcert certificates now have a fixed notBefore date of June 1st, 2019. Once the ACME server is implemented, certificate lifespan will be shortened to 3 months. (#174)
**Certificates generated by previous versions of mkcert after July 1s...
🔬 New advanced options:
-ecdsa to generate ECDSA private keys-client to generate client certificates-csr to sign certificate signing requests$TRUST_STORES to select what stores to install intoAlso, in other news:
-cert-file, -key-file and -p12-file flagsRelease v1.1.2
A round of new supported root stores and formats, all contributions from the community.
Get up and running with Kimi-K2.5, GLM-4.7, DeepSeek, gpt-oss, Qwen, Gemma and other models.
Production-Grade Container Scheduling and Management
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
The world’s fastest framework for building websites.