mkcert
mkcert copied to clipboard
Clarify that mkcert and be used as an infrastructure CA
Filippo, as we discussed as GothamGo, using mkcert as an infrastructure CA to secure internal service-to-service http calls is probably a use case falls within the mission of mkcert. The readme provides enough detail on how to do this manually, but it warns against "production" use. Please clarify that this use case is not discouraged. Thanks.
Hii
For anyone else landing here, you might later find this issue which points you in the direction of step as a production grade alternative to mkcert.
A similar issue discussion also has this to say:
- If you're just looking for a simple tool to create certs that work for local development, use
mkcert.- If you're testing an ACME integration, use
pebble(andstep-ca, as a second data point :).- If you need something more sophisticated, like an ACME CA that you can bring into staging or run in production for server-to-server mTLS, check out
step&step-ca!