Self-signed certificates

[TrySound]

I found this project use selfsigned package to generate certificates. I recently played with it in vite and found it does not generate valid certificates. Chrome shows red wall.

Is there a reason to use it considering it has big install size because of node-forge? https://packagephobia.com/result?p=selfsigned

[mrbbot]

Hey! 👋 Apologies for the delayed response. I think this is expected. Chrome will always warn on self-signed certificates unless you explicitly trust them. If you click Advanced, you should be able to proceed.

I'd love to remove the dependency on node-forge, though I'm not sure Node's built-in crypto module supports everything required to generate these certificates natively. Do you know of any other lightweight packages for generating certificates?

[TrySound]

It doesn't. I tried to provide an alternative in vite but crypto is not enough here to generate actual certificate, only keys. We decided to remove this dep from vite in favour of either a plugin or a recipe with selfsigned which is simply passed to the config module.

Btw my teammate, @istarkov, figured a way to use cloudflare for https. https://dev.to/istarkov/fast-and-easy-way-to-setup-web-developer-certificates-450e

[TrySound]

Also see here since vite bundles most of its dependencies we were able to reduce it's size in v2 (will be removed in v3) by pickings parts of its code. Perhaps doesn't make sense in this project. https://github.com/vitejs/vite/blob/main/packages/vite/src/node/certificate.ts#L36-L39

[mrbbot]

Ah ok, thanks for those details. Vite's v2 implementation looks interesting. We're already bundling some of our dependencies so should be able to integrate that. 👍

Will consider removing this feature in the next major version too...