mirror of
https://github.com/FiloSottile/mkcert.git
synced 2026-04-25 05:26:03 +03:00
[GH-ISSUE #337] minimize CA root certificate lifetime #219
Labels
No labels
TLS stack issue
Windows
bug
duplicate
duplicate
enhancement
help wanted
help wanted
pull-request
question
question
root store
waiting for info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/mkcert#219
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Amel1010 on GitHub (Feb 10, 2021).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/337
I have a problem on safari browser with ios 13 and 14 devices. the rootCA.pem is installed and exists under trusted certificates on ios device but it still not valid on safari!!
after seeing some replies on the net , certain recommand to minimise the lifetime of the certificate to maximum 825 days.
Is it possible with mkcert certificate ? if yes wich release contains this configuration ?
@FiloSottile commented on GitHub (Feb 10, 2021):
Latest mkcert already limits the lifetime of the website certificate to within the iOS limits. The limits don't apply to the lifetime of the root CA. If you are having issues, update to the latest mkcert and then regenerate the website certificate.
@xzxiaoshan commented on GitHub (Dec 12, 2024):
Android also has other duration issues, and the best solution should be to provide parameters when creating certificates to set the validity period (days)