• v1.4.4 2a46726ceb

    v1.4.4 Stable

    kerem released this 2022-04-26 20:37:25 +03:00 | 1 commits to master since this release

    📅 Originally published on GitHub: Tue, 26 Apr 2022 17:51:05 GMT
    🏷️ Git tag created: Tue, 26 Apr 2022 17:37:25 GMT

    Firefox packaged in a Snap, which is the default browser of Ubuntu 22.04, is now supported

    Fixed a crash when a CSR doesn't have SANs 💥

    Calling mkcert with no arguments only prints the help text 🤫

    Pre-built binaries for windows/arm64 and darwin/arm64 🧱

    Pre-built binaries are now available at stable URLs like these 🔗
    https://dl.filippo.io/mkcert/latest?for=linux/amd64
    https://dl.filippo.io/mkcert/v1.4.4?for=windows/arm64

    Downloads
  • v1.4.3 1a5aaff12e

    v1.4.3 Stable

    kerem released this 2020-11-25 16:09:45 +03:00 | 14 commits to master since this release

    📅 Originally published on GitHub: Wed, 25 Nov 2020 13:16:22 GMT
    🏷️ Git tag created: Wed, 25 Nov 2020 13:09:45 GMT

    The EKU logic is now simpler, and it follows the following rules

    • if an IP address, DNS name, or URI SAN is present, serverAuth is included
    • if -client is used, clientAuth is included
    • if an email address SAN in present, emailProtection is included

    Certificate generation based on CSRs is now consistent with standard certificate generation.

    Releases are now built from GitHub Actions.

    Downloads
  • v1.4.2 6649e9d2e7

    v1.4.2 Stable

    kerem released this 2020-10-26 02:55:09 +03:00 | 20 commits to master since this release

    📅 Originally published on GitHub: Mon, 26 Oct 2020 00:04:33 GMT
    🏷️ Git tag created: Sun, 25 Oct 2020 23:55:09 GMT

    • Reduce certificate lifetime to 2 years and 3 months
    • Detect various flavors of Firefox (#225, #280)
    • Build release binary for linux/arm64 (#284)

    The Go import path of the module is now filippo.io/mkcert, which should only affect users installing the tool with go get, which was never a recommended installation method.

    Downloads
  • v1.4.1 90341b0d5a

    v1.4.1 Stable

    kerem released this 2019-11-10 02:21:05 +03:00 | 37 commits to master since this release

    📅 Originally published on GitHub: Sat, 09 Nov 2019 23:29:25 GMT
    🏷️ Git tag created: Sat, 09 Nov 2019 23:21:05 GMT

    Note: packagers building from source now need to set the version like -ldflags "-X main.Version=$VERSION"

    • Use sudo when necessary to install in system-wide NSS stores (#192)
    • Add a -version flag (#191)
    • Speed up macOS execution by 4x for most users (#135)
    • Minor usability improvements (#182, #178, #188)
    Downloads
  • v1.4.0 2d05f3b4d8

    v1.4.0 Stable

    kerem released this 2019-07-25 22:59:21 +03:00 | 50 commits to master since this release

    📅 Originally published on GitHub: Fri, 16 Aug 2019 21:29:35 GMT
    🏷️ Git tag created: Thu, 25 Jul 2019 19:59:21 GMT

    macOS 10.15 Catalina introduced certificate lifespan limits which block mkcert certificates. As a temporary measure, mkcert certificates now have a fixed notBefore date of June 1st, 2019. Once the ACME server is implemented, certificate lifespan will be shortened to 3 months. (#174)

    Certificates generated by previous versions of mkcert after July 1st, 2019 will not work on macOS 10.15 Catalina, and will have to be regenerated. The root CA is unaffected and there is no need to rerun mkcert -install.

    URL (#166) and email (for S/MIME, #152) SANs are now supported.

    Client certificates are now created with a -client filename suffix, and they claim the serverAuth EKU as well as the clientAuth one.

    The certificate subject now includes the full user name, like filippo@Bistromath.local (Filippo Valsorda).

    SLES, OpenSUSE (#162), Snapcraft (#116), and CentOS 7 (#120) are now supported.

    Linux release binaries are now fully static, and will work regardless of the system libc. (#169)

    Downloads
  • v1.3.0 99e15e29f9

    v1.3.0 Stable

    kerem released this 2019-02-03 02:51:24 +03:00 | 73 commits to master since this release

    📅 Originally published on GitHub: Sun, 03 Feb 2019 00:02:26 GMT
    🏷️ Git tag created: Sat, 02 Feb 2019 23:51:24 GMT

    🔬 New advanced options:

    • -ecdsa to generate ECDSA private keys
    • -client to generate client certificates
    • -csr to sign certificate signing requests
    • $TRUST_STORES to select what stores to install into

    Also, in other news:

    • Add "Firefox Nightly.app" support on macOS
    • Set the CommonName when generating PKCS#12 files for IIS
    Downloads
  • v1.2.0 da4da8a4bc

    v1.2.0 Stable

    kerem released this 2019-01-07 03:07:18 +03:00 | 83 commits to master since this release

    📅 Originally published on GitHub: Mon, 07 Jan 2019 00:14:12 GMT
    🏷️ Git tag created: Mon, 07 Jan 2019 00:07:18 GMT

    • Add -cert-file, -key-file and -p12-file flags
    • Add some helpful lines to docs and output
    • Fix Java failure modes on Windows
    Downloads
  • v1.1.2 fcebdc9845

    v1.1.2 Stable

    kerem released this 2018-08-26 00:52:43 +03:00 | 93 commits to master since this release

    📅 Originally published on GitHub: Sat, 25 Aug 2018 22:29:28 GMT
    🏷️ Git tag created: Sat, 25 Aug 2018 21:52:43 GMT

    Downloads
  • v1.1.1 0bd4ac60da

    v1.1.1 Stable

    kerem released this 2018-08-20 02:07:47 +03:00 | 97 commits to master since this release

    📅 Originally published on GitHub: Sun, 19 Aug 2018 23:12:03 GMT
    🏷️ Git tag created: Sun, 19 Aug 2018 23:07:47 GMT

    • Support the Arch system root store
    • Support Java on Windows
    • Support the JRE root store
    • Support multiple CAs on Linux
    Downloads
  • v1.1.0 44af1b6556

    v1.1.0 Stable

    kerem released this 2018-08-13 07:33:52 +03:00 | 105 commits to master since this release

    📅 Originally published on GitHub: Mon, 13 Aug 2018 04:39:36 GMT
    🏷️ Git tag created: Mon, 13 Aug 2018 04:33:52 GMT

    A round of new supported root stores and formats, all contributions from the community.

    Downloads