4 ms·
is there an advantage to this over using openssl or nss/certutil commands?
by vectorEQ 8y ago
is there an advantage to this over using openssl or nss/certutil commands?
- toyg 8y agoThe main advantage to me would be "not having to remember openssl commands you use twice a year"...
- vectorEQ 8y agoseems a way to gather all kinds of extra clutter on your box. keep notes of things you do :-) it just requires a txt editor present in most operating systems by default. if you document carefuly, you can even just add #!/bin/sh in the top to automate ;D but it's atleast honest comment :D
- toyg 8y agoI freely admit I'm bad at keeping notes - I've tried various systems over the years (from wikis to nvalt to evernote etc) and hated them all for one reason or another. And there is a limit to the usefulness of scripting it all, because I'll soon forget what the script was for, the inevitable pitfalls, what to change if I'm on another machine and so on. So this sort of very simple and natural interface can be appealing to me. Mind, I'll probably forget I've installed it and in 6 months time I'll have the same problem and I'll google openssl again...
- daurnimator 8y agoThats why I write a blog post to myself ;) https://daurnimator.com/post/115624714644/howto-generate-a-self-signed-ssl-cert-in-one https://daurnimator.com/post/115624714644/howto-generate-a-s...
- devy 8y agoYour blog post was about creating a self-signed TLS cert. mkcert is more than that, it creates the root CA first before creating self-signed certs and trusting them.
- daurnimator 8y agoIndeed; but I was replying with my solution to the general problem of > remember openssl commands you use twice a year
- bananarepdev 8y agoAlso, this tool automates installation in the SO and Firefox's truststores.
- deleted 8y ago[deleted]