[GH-ISSUE #178] What is the "Password:" for which I'm prompted when I run mkcert -install on a Mac? #114

Closed
opened 2026-02-25 22:32:38 +03:00 by kerem · 7 comments
Owner

Originally created by @kenny-evitt on GitHub (Jul 19, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/178

From a Terminal window:

$ mkcert -install
Created a new local CA at "/Users/kenny/Library/Application Support/mkcert" 💥
Password:

I'm pretty sure this is my Keychain password (the 'login' password for my user) but it's certainly not clear that that's what's being requested. Could this (or should) this be documented in the README? (I'd be willing to make a stab at doing so if it's considered helpful.)

Originally created by @kenny-evitt on GitHub (Jul 19, 2019). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/178 From a *Terminal* window: ``` $ mkcert -install Created a new local CA at "/Users/kenny/Library/Application Support/mkcert" 💥 Password: ``` I'm pretty sure this is my Keychain password (the 'login' password for my user) but it's certainly not clear that that's what's being requested. Could this (or should) this be documented in the README? (I'd be willing to make a stab at doing so if it's considered helpful.)
kerem closed this issue 2026-02-25 22:32:38 +03:00
Author
Owner

@hauleth commented on GitHub (Jul 29, 2019):

Current account password. The same you use when you do sudo true

<!-- gh-comment-id:515935233 --> @hauleth commented on GitHub (Jul 29, 2019): Current account password. The same you use when you do `sudo true`
Author
Owner

@rfay commented on GitHub (Jul 29, 2019):

This is a confusing thing that mkcert silently runs sudo. Maybe necessary, but a little more output would be useful, knowing that sudo may go ahead and prompt for password.

<!-- gh-comment-id:515951286 --> @rfay commented on GitHub (Jul 29, 2019): This is a confusing thing that mkcert silently runs sudo. Maybe necessary, but a little more output would be useful, knowing that sudo may go ahead and prompt for password.
Author
Owner

@hauleth commented on GitHub (Jul 29, 2019):

Actually, at least in macOS Sierra, it is not needed to use sudo for security command line tool, as this will automatically ask user whether they allow changes and would even allow using TouchID to confirm such changes.

<!-- gh-comment-id:515951992 --> @hauleth commented on GitHub (Jul 29, 2019): Actually, at least in macOS Sierra, it is not needed to use `sudo` for `security` command line tool, as this will automatically ask user whether they allow changes and would even allow using TouchID to confirm such changes.
Author
Owner

@adamdecaf commented on GitHub (Jul 30, 2019):

I created https://github.com/FiloSottile/mkcert/pull/183 which removes sudo where we can, but since we add the mkcert root to the System Keychain sudo appears to be required still.

<!-- gh-comment-id:516444763 --> @adamdecaf commented on GitHub (Jul 30, 2019): I created https://github.com/FiloSottile/mkcert/pull/183 which removes `sudo` where we can, but since we add the mkcert root to the System Keychain `sudo` appears to be required still.
Author
Owner

@FiloSottile commented on GitHub (Jul 30, 2019):

We should probably always pass --prompt="Sudo password:" to sudo.

<!-- gh-comment-id:516586762 --> @FiloSottile commented on GitHub (Jul 30, 2019): We should probably always pass `--prompt="Sudo password:"` to `sudo`.
Author
Owner

@kenny-evitt commented on GitHub (Jul 31, 2019):

@FiloSottile That's a good idea too but a brief mention in the README would nicely set expectations too:

<!-- gh-comment-id:516890144 --> @kenny-evitt commented on GitHub (Jul 31, 2019): @FiloSottile That's a good idea too but a brief mention in the README would nicely set expectations too: - [Note `sudo` requirement by kenny-evitt · Pull Request #185 · FiloSottile/mkcert](https://github.com/FiloSottile/mkcert/pull/185)
Author
Owner

@adamdecaf commented on GitHub (Jul 31, 2019):

I like the idea of passing --promtp to sudo.

<!-- gh-comment-id:516917751 --> @adamdecaf commented on GitHub (Jul 31, 2019): I like the idea of passing `--promtp` to `sudo`.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/mkcert#114
No description provided.