#mkcert — Public Fediverse posts

[SSL: CERTIFICATE_VERIFY_FAILED] in Gajim Flatpak on Ubuntu when using local CAs (like mkcert)?

The sandbox can't see your host CA. Fix it by mapping the host certificate bundle into the container:

flatpak override --user --filesystem=host-etc:ro --env=SSL_CERT_FILE=/run/host/etc/ssl/certs/ca-certificates.crt org.gajim.Gajim

Restart Gajim to apply!

#Gajim #Linux #Ubuntu #Flatpak #mkcert #XMPP #SSL #OpenSSL
@prosodyim

Собственный центр сертификации под Linux

Для тестирования, разработки и внутреннего использования часто используются самозаверенные (самоподписанные) сертификаты . Технически такой сертификат ничем не отличается от публичного, только вместо передачи на подпись в удостоверяющий центр (УЦ) пользователь создаёт свою собственную подпись. Под Linux мы можем сгенерировать сертификат командой mkcert или OpenSSL. Единственная проблема в том, что браузер не доверяет такому сертификату, поскольку он не подписан доверенным УЦ. Поэтому нужно ещё запустить и настроить собственный УЦ, который подписывает наши сертификаты — и добавить этот УЦ в список доверенных центров сертификации УЦ (или браузера).

https://habr.com/ru/companies/globalsign/articles/986352/

#TLS #сертификаты #УЦ #удостоверяющий_центр #Smallstep #XCA #самозаверенный_сертификат #самоподписанный_сертфикат #localhost #mkcert

„mkcert: Vertrauenswürdige SSL-Zerfitikate für Entwickler“

https://malte70.de/blog/mkcert-lokale-ca-fuer-entwickler/

#blog #mkcert #development #linux #macos #windows #devenv #webdev

**TLS Certificate Creation Made Easy: Uncovering mkcert!**

As someone who's wasted countless hours creating TLS certificates with OpenSSL command line, I was thrilled to discover mkcert!

https://youtu.be/rDxRcjfNJcg

If you're tired of tedious OpenSSL commands and want to simplify your certificate creation process, this video is for you.

https://github.com/FiloSottile/mkcert

#mkcert #Coding #DevOps #TLS #OpenSSL

I did it again. I set up a local CA for development using #openssl 🤦‍♂️

Why do I keep forgetting about #mkcert?

https://github.com/FiloSottile/mkcert

Локальный HTTPS в dev-окружении — простая настройка

Иногда в процессе веб-разработки требуется безопасное окружение в браузере, то есть HTTPS. Удобный способ сделать это — установить локальный УЦ и автоматизировать выдачу сертификатов на любые поддомены lcl.host и localhost. Это более функциональная и удобная альтернатива самоподписанным сертификатам . Для установки локального УЦ есть инструменты lcl.host и mkcert , которые помогают быстро настроить и использовать HTTPS в dev-окружении.

https://habr.com/ru/companies/globalsign/articles/817221/

#HTTPS #lclhost #mkcert #локальный_УЦ #самоподписанные_сертификаты #CORS #HTTP/2 #HTTP/3 #cookies #OAuth #Anchor #localhost

Quick update: the failing tests were apparently because I had my VPN on on macOS (that was creating an additional IPv4 interface that was getting picked up by the tests that check that your server is accessible via a valid TLS certificate from all available local IPs).

So no patch necessary :)

#AutoEncryptLocalhost #https #mkcert #certutil #JavaScript #js #nodeJS #macOS

Hey folks, I just released Auto Encrypt Localhost* v8.4.0 with better async support and updated dependencies.

https://www.npmjs.com/package/@small-tech/auto-encrypt-localhost

* My pure JavaScript module (no mkcert, certutil, etc., required) that automatically provisions and installs locally-trusted TLS certificates for Node.js https servers.

(There seems to be an issue with tests failing on macOS, will debug that tomorrow and likely post a patch release.)

#AutoEncryptLocalhost #https #mkcert #certutil #JavaScript #js #nodeJS

Wochenrückblick, Ausgabe 28 (2024-07).

Diesmal mit

- der Zukunft von BRouter-Web und Bikerouter
- dem vielen Wasser, das hier überall auf Wiesen und Feldern steht
- meiner Affinität zu Keyboards als primäres Interaktionselement mit Computern …
- … und welchen Keyboard-Shortcut ich in Firefox schmerzlich vermisse
- der macOS App Rectangle
- dem Fork von nginx zu freenginx und wie ich am Wochenende nach 19 Jahren ausschließlich nginx-Nutzung mit Caddy erstmals einen anderen Webserver angeschaut habe und seit dem ziemlich begeistert bin
- einer Anleitung wie man gute technische Dokumentation schreibt
- mkcert und wie es xca als Management-Tool für meine lokale CA abgelöst hat
- der Fernsehserie „Parlament“
- und wie immer Techno.

#Wochenrückblick #BRouter #BikeRouter #Regen #Wasser #Keyboard #Firefox #macOS #Rectangle #nginx #freenginx #Caddy #Caddyserver #Documentation #mkcert #xca #Parlament #Techno

https://www.marcusjaschen.de/blog/2024/2024-07/

How to trust self-signed certificates created by #mkcert on your iOS device:

- locate your created root CA public cert via "mkcert -CAROOT"
- copy the rootCA.pem to your iOS device (e.g. via AirDrop)
- install certificate via "Settings > Profile Downloaded"
- activate certificate via "Settings > About > Certificate Trust Settings" and Enable your cert

🏷️ #selfhosting #bitwarden #vaultwarden

Right, there is a way: Here’s how you can add a certificate authority (CA) to Firefox on Linux that also works on Fedora Silverblue: https://github.com/fedora-silverblue/issue-tracker/issues/397#issuecomment-1372211636

And with that, I don‘t think there’s any other blocker for my rewriting Auto Encrypt Localhost as a mkcert alternative in pure JavaScript for Node.js that doesn’t require certutil or any other binary dependency to be installed.

🤓👍

#mozilla #firefox #fedora #fedoraSilverblue #tls #ssl #linux #enterprise #certificates #nodeJS #mkcert

#mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like. https://bit.ly/2tGPkMD #Security #Java h/t @clementplop

Setting up a local mTLS (Mutual TLS) development environment using #mkcert tool from Filippo
with #nginx on a #Podman
container in #Fedora
& accessing via #curl and #python

https://kushaldas.in/posts/setting-up-local-mtls-environment-using-mkcert.html

Just released @small-tech/https version 3.0.3

Includes the new Auto Encrypt Localhost version 7.0.7 from earlier today.

How it works: replace import https from 'https' with import https from '@small-tech/https' in your Node.js app and get:

- automatic localhost certs via mkcert
- automatic hostname certs via Let’s Encrypt

https://github.com/small-tech/https

Release notes: https://github.com/small-tech/https/releases/tag/3.0.3

#SmallTech #SmallWeb #TLS #mkcert #LetsEncrypt #NodeJS

Just released Auto Encrypt Localhost 7.0.6: “The hybrid approach”

Third time’s a charm. So this implementation takes the best of the 6.x and 7.x approaches and gives you the package-size advantages of 7.x while side-stepping the sudo-related issues.

https://github.com/small-tech/auto-encrypt-localhost

Release notes: https://github.com/small-tech/auto-encrypt-localhost/releases/tag/7.0.6

#SmallTech #SmallWeb #NodeJS #TLS #localhost #mkcert #dev

Just published Auto Encrypt Localhost version 7.0.5

The module now supports and works properly on macOS and Windows again on the new/current 7.x branch using the new install-time mkcert setup flow.

https://github.com/small-tech/auto-encrypt-localhost

#SmallTech #SmallWeb #TLS #mkcert #NodeJS

Just released Auto Encrypt Localhost version 7.0.4.

Fixes hanging npm install bug by implementing a graphical sudo prompt.

https://github.com/small-tech/auto-encrypt-localhost

Release notes: https://github.com/small-tech/auto-encrypt-localhost/releases/tag/7.0.4

#SmallTech #SmallWeb #mkcert #NodeJS

Just published @small-tech/https version 3.0.0

Breaking change: ESM. Includes Auto Encrypt 3.0.0 and Auto Encrypt Localhost 7.0.2.

https://github.com/small-tech/https

#SmallTech #SmallWeb #NodeJS #https #TLS #LetsEncrypt #mkcert

If you missed today’s live stream, you can watch the recording on https://ar.al – I covered today’s v7 release of Auto Encrypt Localhost, as well as the Auto Encrypt and https modules and Site.js.

#SmallTech #SmallWeb #mkcert #LetsEncrypt #NodeJS #javascript

Just released Auto Encrypt Localhost version 7.0.2.

(Sets up mkcert certificates for you and makes it easy to use them in Node.js)

npm i @small-tech/auto-encrypt-localhost

Source: https://github.com/small-tech/auto-encrypt-localhost

What’s new?

mkcert binaries are no longer bundled (which means the package size goes down from 24MB to ~76kb)

Going to do a S’update (small update) live stream in a few minutes to talk about it at https://ar.al

#NodeJS #TLS #mkcert #js

Initial release: nodecert

Node.js wrapper over mkcert that creates a local certificate authority and locally-trusted TLS certificates that you can use during development. Avoids the issues with self-signed certificates. Supports Linux, macOS, and Windows (untested) via pre-built binaries.

Source: https://source.ind.ie/hypha/tools/nodecert

Pull requests, etc.: https://github.com/indie-mirror/nodecert

#tls #https #nodejs #mkcert