[jandrese]

Do you actually need a root cert for this? Can't you just install the server's self-signed cert?

[vbezhenar]

I think it's actually self-signed certificate for domain (localbattle.net) which resolves to 127.0.0.1, not CA one, sorry for misinformation.

[jandrese]

That's much less troubling. It's much harder to engage in shenanigans in that case.