mirror of
https://github.com/FiloSottile/mkcert.git
synced 2026-04-25 05:26:03 +03:00
[GH-ISSUE #208] How does one completely uninstall this library? #135
Labels
No labels
TLS stack issue
Windows
bug
duplicate
duplicate
enhancement
help wanted
help wanted
pull-request
question
question
root store
waiting for info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/mkcert#135
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @SHxKM on GitHub (Oct 13, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/208
Thanks for the useful library, however I'd like to uninstall it + remove this:
Where is
rootCA-key.pem?@rfay commented on GitHub (Oct 13, 2019):
mkcert -uninstallwill remove the root CA from your browser and systemrm -r "$(mkcert -CAROOT)"will then remove the root CA from your home directory.Then you can remove mkcert however you installed it. Probably just
rm $(which mkcert)@FiloSottile commented on GitHub (Oct 13, 2019):
Indeed, the
mkcert -uninstallstep is the important one, as it makesrootCA-key.pempowerless.@SHxKM commented on GitHub (Oct 13, 2019):
@FiloSottile If I did
brew uninstall mkcertand thensudo find / -name rootCA-key.pem, and deletedmkcert's folder from Application Support, am I set?@FiloSottile commented on GitHub (Oct 16, 2019):
No, if you didn't run
mkcert -uninstallthe certificate is still trusted by your system. (This is only a problem if anyone obtained a copy ofrootCA-key.pem.) Unfortunately if you deleted the whole mkcert foldermkcert -uninstallwon't work now, so you have to remove the certificate manually from Keychain Access, as well as from the Firefox root store.@rfay commented on GitHub (Oct 16, 2019):
Actually it's easier than that I think... Just
mkcert -iinstallagain and thenmkcert -uninstall@FiloSottile commented on GitHub (Oct 17, 2019):
No, that will make a new root, and then uninstall that new one, not the previous one.
It's so you can have multiple independent CAROOTs.
@felipevalois commented on GitHub (May 2, 2021):
@FiloSottile I have tried all of the above but the certificate still keeps showing up. What should I do?
@npivaut commented on GitHub (Nov 2, 2022):
Thanks :)
@RoniWasHere commented on GitHub (Jan 31, 2023):
I can't get rid of this !
Chrome is not "forgetting" this certificate no matter what!
I've removed with
mkcert -uninstallI did
rm -r "$(mkcert -CAROOT)"I did
brew remove mkcertAnd still, chrome thinks my local domain is not working because of this
@rfay commented on GitHub (Jan 31, 2023):
All the things you did uninstall the CA, not the cert. You seem to have a certificate installed somewhere, even though you deleted the CA. Remove the cert and key from whatever webserver is serving this.
@RoniWasHere commented on GitHub (Jan 31, 2023):
The site is in docker, I've replaced the certificates with REAL ONES from Let's Encrypt, from a working server.
@rfay commented on GitHub (Jan 31, 2023):
You haven't quite succeeded yet in replacing the certs.
@RoniWasHere commented on GitHub (Jan 31, 2023):
I have removed all the generated cert files, rebuilt the dockerfile, pruned all volumes.
want to point out suggestions instead of telling useless comments?
@rfay commented on GitHub (Jan 31, 2023):
I'm just telling you that your webserver is still using a cert that you don't want it to use. This is a problem with your configuration. I understand that you think you've taken care of it, but you haven't. I can't help you beyond that. I won't reply any further.
Note that if you build certs into your Docker image you may be making a big mistake security-wise.
@RoniWasHere commented on GitHub (Feb 1, 2023):
@rfay
Why on earth would you think that I'm doing it? all I did, was install mkcert on my mac, generated a certificate for my local website - put it in a VOLUME so that nginx container can use it to serve the site to the browser. that's it.
I'm using the basic
nginx:latesttag - no creating my own image.@nickretallack commented on GitHub (Nov 21, 2023):
I'm having issues with this as well. How do you delete a cert that was installed with mkcert? On Mac OS. Chrome still seems to be trying to use SSL when it's not there.
@rfay commented on GitHub (Nov 22, 2023):
mkcert -installinstalls a CA (Certificate Authority). It does not install certificates. You can create certificates with it and you could use those various ways.If you want to remove the CA, you would do
mkcert -uninstalland then optionally remove the directory shown bymkcert -CAROOT. If you have created certs and then used them somewhere, you just have to sort that out.@monty62 commented on GitHub (Nov 22, 2023):
Thank you for what you do and Happy Thanksgiving
On Tue, Nov 21, 2023, 4:55 PM Randy Fay @.***> wrote:
@Baluditor commented on GitHub (Mar 21, 2024):
For anyone having this problem, follow these instructions. This is the missing step here (at least it was for me).