.\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.48.5.
.TH MKCERT "1" "November 2021" "mkcert" "User Commands"
.SH NAME
mkcert \- zero-config tool to make locally trusted certificates
.SH DESCRIPTION
Usage of mkcert:
.IP
\f(CW$ mkcert -install\fR
.IP
Install the local CA in the system trust store.
.IP
\f(CW$ mkcert example.org\fR
.IP
Generate "example.org.pem" and "example.org\-key.pem".
.IP
\f(CW$ mkcert example.com myapp.dev localhost 127.0.0.1 ::1\fR
.IP
Generate "example.com+4.pem" and "example.com+4\-key.pem".
.IP
\f(CW$ mkcert "*.example.it"\fR
.IP
Generate "_wildcard.example.it.pem" and "_wildcard.example.it\-key.pem".
.IP
\f(CW$ mkcert -uninstall\fR
.IP
Uninstall the local CA (but do not delete it).
.PP
Advanced options:
.HP
\fB\-cert\-file\fR FILE, \fB\-key\-file\fR FILE, \fB\-p12\-file\fR FILE
.IP
Customize the output paths.
.HP
\fB\-client\fR
.IP
Generate a certificate for client authentication.
.HP
\fB\-ecdsa\fR
.IP
Generate a certificate with an ECDSA key.
.HP
\fB\-pkcs12\fR
.IP
Generate a ".p12" PKCS #12 file, also know as a ".pfx" file,
containing certificate and key for legacy applications.
.HP
\fB\-csr\fR CSR
.IP
Generate a certificate based on the supplied CSR. Conflicts with
all other flags and arguments except \fB\-install\fR and \fB\-cert\-file\fR.
.HP
\fB\-CAROOT\fR
.IP
Print the CA certificate and key storage location.
.IP
$CAROOT (environment variable)
.IP
Set the CA certificate and key storage location. (This allows
maintaining multiple local CAs in parallel.)
.IP
$TRUST_STORES (environment variable)
.IP
A comma\-separated list of trust stores to install the local
root CA into. Options are: "system", "java" and "nss" (includes
Firefox). Autodetected by default.
.SH "SEE ALSO"
The full documentation for
.B mkcert
is maintained as a Texinfo manual.  If the
.B info
and
.B mkcert
programs are properly installed at your site, the command
.IP
.B info mkcert
.PP
should give you access to the complete manual.