mkcert
mkcert copied to clipboard
mkcert silently overwrites CSR file
running mkcert 1.4.2.
when using the -csr flag, mkcert silently replaces the CSR file www.example.com.pem with a file of the same name www.example.com.pem that contains the signed certificate. instead of this destructive behaviour, mkcert could exit with an error instead of overwriting.
- create a CSR file in an external system and place in the current directory
- name the CSR file
www.example.com.pem - run
mkcert -csr www.example.com.pem - the file
www.example.com.pemis replaced with the signed cert, and the CSR is destroyed
Ah, yeah we should not do that. I'll just add an error for trying to write to an existing file.