[GH-ISSUE #95] Add runtime flag for specifying trust stores to install to #50

Closed
opened 2026-02-25 22:32:28 +03:00 by kerem · 4 comments
Owner

Originally created by @alanorth on GitHub (Jan 7, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/95

I wish there was a flag to specify which trust stores to install to, for example only to Firefox's. The current default is to install in system (requires sudo), Chrome (which I don't use), and Firefox trust stores.

Originally created by @alanorth on GitHub (Jan 7, 2019). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/95 I wish there was a flag to specify which trust stores to install to, for example *only* to Firefox's. The current default is to install in system (requires sudo), Chrome (which I don't use), and Firefox trust stores.
kerem 2026-02-25 22:32:28 +03:00
Author
Owner

@FiloSottile commented on GitHub (Jan 8, 2019):

I can see this being controlled with env vars, not to pollute the CLI.

<!-- gh-comment-id:452378937 --> @FiloSottile commented on GitHub (Jan 8, 2019): I can see this being controlled with env vars, not to pollute the CLI.
Author
Owner

@alanorth commented on GitHub (Jan 8, 2019):

Sure, however you think is best. As long as there's a way to operate on
user-only, unprivileged cert stores I am happy. :)

<!-- gh-comment-id:452382265 --> @alanorth commented on GitHub (Jan 8, 2019): Sure, however you think is best. As long as there's a way to operate on user-only, unprivileged cert stores I am happy. :)
Author
Owner

@FiloSottile commented on GitHub (Feb 2, 2019):

Added $TRUST_STORES.

<!-- gh-comment-id:460000746 --> @FiloSottile commented on GitHub (Feb 2, 2019): Added `$TRUST_STORES`.
Author
Owner

@alanorth commented on GitHub (Feb 3, 2019):

Works great, thanks!

$ TRUST_STORES=nss $(go env GOPATH)/bin/mkcert -install
Using the local CA at "/home/aorth/.local/share/mkcert" ✨
The local CA is now installed in the Firefox and/or Chrome/Chromium trust store (requires browser restart)! 🦊

$ TRUST_STORES=nss $(go env GOPATH)/bin/mkcert -uninstall
Using the local CA at "/home/aorth/.local/share/mkcert" ✨
The local CA is now uninstalled from the Firefox and/or Chrome/Chromium trust store(s)! 👋
<!-- gh-comment-id:460037032 --> @alanorth commented on GitHub (Feb 3, 2019): Works great, thanks! ``` $ TRUST_STORES=nss $(go env GOPATH)/bin/mkcert -install Using the local CA at "/home/aorth/.local/share/mkcert" ✨ The local CA is now installed in the Firefox and/or Chrome/Chromium trust store (requires browser restart)! 🦊 $ TRUST_STORES=nss $(go env GOPATH)/bin/mkcert -uninstall Using the local CA at "/home/aorth/.local/share/mkcert" ✨ The local CA is now uninstalled from the Firefox and/or Chrome/Chromium trust store(s)! 👋 ```
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/mkcert#50
No description provided.