http icon indicating copy to clipboard operation
http copied to clipboard

Documentation: Usage of HTTPS certificates for local development

Open ThisIsMissEm opened this issue 5 months ago • 2 comments

Hi! I've been working on Mastodon which uses http.rb, and in local development, I'm using localcan to route traffic to various development servers all with auto-generated SSL certificates from a root certificate that localcan created. This means they're all self-signed.

Whilst reading the HTTPS documentation, I noticed that it was using ctx.set_params on the OpenSSL::SSL::SSLContext, I noticed a line in the documentation of:

The cert, key, and extra_chain_cert attributes are deprecated. It is recommended to use add_certificate instead.

Source: https://docs.ruby-lang.org/en/master/OpenSSL/SSL/SSLContext.html#attribute-i-cert

I'm wondering if the documentation should be updated to use that add_certificate method instead?

As I also have a Root CA certificate, as well as individual .crt and .key files per domain, I'm wondering if there's a way to tell http.rb to just add that Root CA certificate to it's trust chain, without overriding any existing certificates?

ThisIsMissEm avatar Jul 18 '25 15:07 ThisIsMissEm