使用mkcert创建本地受信任的SSL证书

安装mkcert

对于macOS用户，您可以手动下载二进制安装mkcert或者从中brew安装mkcert

brew install mkcert
brew install nss # if you use Firefox

Linux手动下载安装：

使用wget命令下载mkcert二进制包

export VER="v1.3.0" && wget -O mkcert https://github.com/FiloSottile/mkcert/releases/download/${VER}/mkcert-${VER}-linux-amd64
# 或
wget https://github.com/FiloSottile/mkcert/releases/download/v1.4.4/mkcert-v1.4.4-linux-amd64

下载文件后，使用mv命令将mkcert二进制文件移动到/usr/loa/bin目录 ，并使用chmod命令为mkcert可执行的二进制文件添加可执行权限：

chmod +x  mkcert
sudo mv mkcert /usr/local/bin

在CA根证书系统中安装本地CA

mkcert -install

Created a new local CA at "/home/myfreax/.local/share/mkcert" ?
The local CA is now installed in the system trust store! ⚡️

完成后，可以开始为您的域生成SSL证书。例如，我将生成一个对以下自签名IP证书

mkcert 192.168.1.2 localhost 127.0.0.1 ::1

输出内容如下

Using the local CA at "/root/.local/share/mkcert" ✨

Created a new certificate valid for the following names ?
- "192.168.1.2"
- "localhost"
- "127.0.0.1"
- "::1"
The certificate is at "./192.168.1.2+4.pem" and the key at "./192.168.1.2+4-key.pem" ✅