# Local CA

{%hackmd @RintarouTW/About %}

## Install

brew install mkcert

**Installed CA path**

mkcert -CAROOT
~/Library/Application Support/mkcert

## Make Server Certificate for localhost

mkcert localhost

### express with server certificate

import https from 'https'
import express from 'express'

const credentials = {
 	cert: fs.readFileSync("/Users/allen/.localhost-ssl/localhost.pem"),
	key: fs.readFileSync("/Users/allen/.localhost-ssl/localhost-key.pem")
}

const app = express()

const server = https.createServer(credentials, app)

## Make Client Certificate

mkcert -client localhost

### Let Node to know local CA certificate

export NODE_EXTRA_CA_CERTS=~/Library/Applcation Support/mkcert/rootCA.pem

**axios to use certificate**

const httpsAgent = new https.Agent({
  //rejectUnauthorized: false, // (NOTE: this will disable client verification)
  cert: fs.readFileSync("./localhost-client.pem"),
  key: fs.readFileSync("./localhost-client-key.pem"), 
  passphrase: "YYY"
})

axios.get('https://localhost/',httpsAgent).then(...)

###### tags: `localhost` `CA` `https` `certificate` `axios` `express`