One certificate to sign them all

Creates a trusted certificate authority on your Mac for dev mode

This script creates a trusted CA on your Mac and signs new trusted certificates with it. These are modern certificates that will pass modern browsers' heightened requirements. This is similar in function to mkcert but more easily configured using OpenSSL .cnf files.

Run bash gen-certs.sh and you'll be walked through the rest. Mac will ask for your password to add the CA to your keychain.

To use the website, run sudo nano /etc/hosts and add the following lines:

127.0.0.1       server-1.com
127.0.0.1       api.server-1.com

You can sign as many server certificates as you want with this new CA on your device. Just duplicate the server-1.cnf and duplicate the last two lines of gen-certs.sh.

If you're developing with Node, make sure to export NODE_EXTRA_CA_CERTS=$(pwd)/certs/ca-crt.pem to trust your CA.