Hacker News new | ask | show | jobs
by sebastiaand 2872 days ago 

  npx tlx-keygen
- No installation required, npx comes with Node.js and downloads/runs/removes the package.

- Generate localhost certs with support for *.localhost, 127.0.0.1 (IPv4), ::1 (IPv6), etc.

- Register in operating system trust store (Win/Lin/Mac)

- Tested with major browsers (Chrome/Firefox/Safari/Edge)

https://www.npmjs.com/package/tls-keygen
1 comments
vectorEQ 2872 days ago
you would need node js installed, so that's atleast 1 installation requirement... node.js has as one of it's dependencies openSSL. So you could use openssl commands and have actually less installation requirements.
link
nailer 2872 days ago
Still sounds good to me - it would do extra stuff like adding it to the Windows cert store if you're there, adding it to Firefox if you use it, etc. And being package it's better to collaborate on than everyone making their own process (and possibly screwing it up).

Since many people who run https://localhost are doing front end development node will probably already be there.

link
nickcox 2872 days ago
If you're on Windows then you get creating a certificate and adding it to the cert store out of the box with PowerShell[0].

[0] https://docs.microsoft.com/en-us/powershell/module/pkiclient...

link
nailer 2872 days ago
That's really useful - and worth submitting as a separate post.
link
kodablah 2872 days ago
> it would do extra stuff like adding it to the Windows cert store if you're there, adding it to Firefox if you use it, etc

This is what mkcert does (FF on Windows not done yet, but FF everywhere else and OS root store is).

> And being package it's better to collaborate on than everyone making their own process (and possibly screwing it up)

Not sure the difference between it being an npm package or a Go project on GitHub is that large. Or are you saying "go build" is easier to screw up than "npm install"?

EDIT: My mistake, misunderstood the context of the comment.

link
nailer 2872 days ago
> This is what mkcert does

> Not sure the difference between it being an npm package or a Go project on GitHub is that large.

I know mkcert also does this. I also agree that other maintained projects are good too. My comment was in response was to it's parent, which reads:

> So you could use openssl commands and have actually less installation requirements.

link