|
|
@@ -24,7 +24,7 @@ The certificate is at "./example.com+5.pem" and the key at "./example.com+5-key.
|
|
|
|
|
|
<p align="center"><img width="444" alt="Chrome screenshot" src="https://user-images.githubusercontent.com/1225294/41887838-7acd55ca-78d0-11e8-8a81-139a54faaf87.png"></p>
|
|
|
|
|
|
-Using certificates from real CAs for development can be dangerous or impossible (for hosts like `localhost` or `127.0.0.1`), but self-signed certificates cause trust errors. Managing your own CA is the best solution, but usually involves arcane commands, specialized knowledge and manual steps.
|
|
|
+Using certificates from real certificate authorities (CAs) for development can be dangerous or impossible (for hosts like `localhost` or `127.0.0.1`), but self-signed certificates cause trust errors. Managing your own CA is the best solution, but usually involves arcane commands, specialized knowledge and manual steps.
|
|
|
|
|
|
mkcert automatically creates and installs a local CA in the system root store, and generates locally-trusted certificates.
|
|
|
|
|
|
@@ -52,13 +52,13 @@ Warning: the `rootCA-key.pem` file that mkcert automatically generates gives com
|
|
|
|
|
|
### Changing the location of the CA files
|
|
|
|
|
|
-The CA certificate and its key are stored in an application data folder in the user home. You usually don't have to worry about it, as installation is automated, but if you need it it's printed by `mkcert -CAROOT`.
|
|
|
+The CA certificate and its key are stored in an application data folder in the user home. You usually don't have to worry about it, as installation is automated, but the location is printed by `mkcert -CAROOT`.
|
|
|
|
|
|
If you want to manage separate CAs, you can use the environment variable `$CAROOT` to set the folder where mkcert will place and look for the local CA files.
|
|
|
|
|
|
### Installing the CA on other systems
|
|
|
|
|
|
-Installing in the trust store does not require the CA key, so you can export just the CA certificate and use mkcert to install it in other machines.
|
|
|
+Installing in the trust store does not require the CA key, so you can export the CA certificate and use mkcert to install it in other machines.
|
|
|
|
|
|
* Look for the `rootCA.pem` file in `mkcert -CAROOT`
|
|
|
* copy it to a different machine
|
James Bie