NAME
mkcert - zero-config tool to make locally trusted certificates
DESCRIPTION
Usage of mkcert:
-
$ mkcert -install
-
Install the local CA in the system trust store.
-
$ mkcert example.org
-
Generate "example.org.pem" and "example.org-key.pem".
-
$ mkcert example.com myapp.dev localhost 127.0.0.1 ::1
-
Generate "example.com+4.pem" and "example.com+4-key.pem".
-
$ mkcert "*.example.it"
-
Generate "_wildcard.example.it.pem" and "_wildcard.example.it-key.pem".
-
$ mkcert -uninstall
-
Uninstall the local CA (but do not delete it).
Advanced options:
-cert-file FILE, -key-file FILE, -p12-file FILE
-
Customize the output paths.
-client
-
Generate a certificate for client authentication.
-ecdsa
-
Generate a certificate with an ECDSA key.
-pkcs12
-
Generate a ".p12" PKCS #12 file, also know as a ".pfx" file, containing certificate and key for legacy applications.
-csr CSR
-
Generate a certificate based on the supplied CSR. Conflicts with all other flags and arguments except -install and -cert-file.
-CAROOT
-
Print the CA certificate and key storage location.
-
$CAROOT (environment variable)
-
Set the CA certificate and key storage location. (This allows maintaining multiple local CAs in parallel.)
-
$TRUST_STORES (environment variable)
-
A comma-separated list of trust stores to install the local root CA into. Options are: "system", "java" and "nss" (includes Firefox). Autodetected by default.
SEE ALSO
The full documentation for mkcert is maintained as a Texinfo manual. If the info and mkcert programs are properly installed at your site, the command
-
info mkcert
should give you access to the complete manual.