Generate and manage SSL certificates for local HTTPS.

Overview

local.dev provides certificate management for secure local development.

Certificate Types

Self-Signed

For quick local testing:

# Generated automatically for *.local.test

Local CA

Create a trusted local Certificate Authority:

1. Generate root CA
2. Install in system trust store
3. Generate certificates signed by CA

Let's Encrypt (Production)

For staging/production environments.

Generating Certificates

Via Dashboard

1. Navigate to Local → Certificates
2. Click Generate Certificate
3. Enter domain name
4. Download certificate files

Via CLI

# Using mkcert (recommended)
mkcert -install
mkcert "*.local.test" localhost 127.0.0.1

Installing Certificates

macOS

# Add to Keychain
sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain \
  local-ca.crt

Linux

# Copy to trust store
sudo cp local-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

Windows

# Import to certificate store
Import-Certificate -FilePath local-ca.crt `
  -CertStoreLocation Cert:\LocalMachine\Root

Using with the Proxy

Configure the reverse proxy to use your certificates:

tls:
  certificates:
    - certFile: /certs/local.test.crt
      keyFile: /certs/local.test.key

Troubleshooting

Browser Warnings

• Ensure root CA is installed
• Check certificate validity
• Clear browser cache

Certificate Expired

1. Generate new certificate
2. Restart services
3. Clear browser cache