凭据访问
Touches local trust stores and private key material.
代理安全
代理安全回答
mkcert creates local certificate authorities and development certificates.
远程变更
Primarily mutates local trust state, not remote systems.
发布/制品风险
Can create certificates that influence development service trust.
推荐控制
Gate CA installation and private-key handling.
代理使用指南
Allow certificate inspection; require approval before installing trust roots or writing private keys.
安装
其他安装命令
macOS
Homebrew已验证 · 100%
brew install mkcertlocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install mkcertMacPorts ports tree · security/mkcert/Portfile · 来源: api.github.com
Linux
Alpine Linux apk已验证 · 92%
sudo apk add mkcertAlpine Linux edge package indexes · mkcert · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install mkcertDebian stable package indexes · mkcert · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install mkcertFedora Rawhide package metadata · mkcert · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#mkcertnixpkgs package indexes · pkgs/by-name/mk/mkcert/package.nix · 来源: api.github.com
Arch Linux pacman已验证 · 92%
sudo pacman -S mkcertArch Linux sync databases · mkcert · 来源: geo.mirror.pkgbuild.com
openSUSE zypper已验证 · 92%
sudo zypper install mkcertopenSUSE Tumbleweed package metadata · mkcert · 来源: download.opensuse.org
Windows
Chocolatey已验证 · 92%
choco install mkcertChocolatey community package catalog · mkcert · 来源: community.chocolatey.org
Scoop已验证 · 92%
scoop install extras/mkcertScoop official bucket manifest trees · bucket/mkcert.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id FiloSottile.mkcert -eWindows Package Manager source index · FiloSottile.mkcert · 来源: cdn.winget.microsoft.com
概览
软件包摘要
Simple tool to make locally trusted development certificates
历史
项目历史与用法
mkcert is Filippo Valsorda's small Go tool for locally trusted development certificates. It appeared in the 2018 developer conversation around localhost HTTPS and was explained by Valsorda in a January 2019 post: deployment certificates had become easier through ACME and Let's Encrypt, but development still fell back to HTTP because localhost and private development names cannot use ordinary public CA validation.
项目历史
The tool's core idea is deliberately narrow. Instead of asking each developer to memorize OpenSSL invocations or manage browser trust stores by hand, mkcert creates a local certificate authority, installs it into the system and Firefox/NSS trust stores where supported, and issues certificates for local hostnames, IP addresses, and wildcards. The upstream README also warns that the generated root CA private key can intercept secure requests from the machine, which is why mkcert is framed as a local development tool rather than production CA infrastructure.
使用方式
mkcert became a common package-manager utility because it solves a recurring web-development pain point with one command and no project-specific configuration. Homebrew, MacPorts, Linux packages, and prebuilt binaries cover the usual developer platforms, while the README leaves web-server configuration to the user after the certificate and key are generated.
来源
审批门
高风险命令的人工审核元数据
本地审批门种子包含 4 条适用于 mkcert 的规则。覆盖的入口点：mkcert。严重级别：严重, 高。覆盖状态：partial，审核于 2026-05-21。
受控操作示例
- Install the local CA into system or browser trust stores.
- Remove the local CA from trust stores.
- Generate local certificates and private keys.
- Write certificate or key files to caller-specified paths.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential files
Credential-bearing paths to review before unattended agent runs.
- macOS
~/Library/Application Support/mkcert/rootCA-key.pem
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
mkcert | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-25
管理器版本1.4.4
管理器更新时间
本地数据OK
上游当前
检测到的最新版本v1.4.4
https://github.com/FiloSottile/mkcert
- 信息No package-manager update timestamp was available.低 置信度
安装元数据
软件包元数据
| 软件包键 | brew:mkcert |
|---|---|
| 版本 | 1.4.4 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/mkcert |
| 主页 | https://github.com/FiloSottile/mkcert |
| 仓库 | https://github.com/FiloSottile/mkcert |
| 上游文档 | https://github.com/FiloSottile/mkcert#readme |
| 许可证 | BSD-3-Clause |
| 源码归档 | https://github.com/FiloSottile/mkcert/archive/refs/tags/v1.4.4.tar.gz |
| 构建依赖 | go |
| Bottle | 可用 (于 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | mkcert |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
mkcert 1.4.4-1+b18
Simple zero-config tool to make locally trusted certificates
https://github.com/FiloSottile/mkcert
sudo apt install mkcert- Section: utils
- Architecture: amd64
- Source Package: mkcert
- 1 依赖
- normalized package name match
- 匹配方式：Mkcert
Nix95%
mkcert
nix profile install nixpkgs#mkcert- normalized package name match
- 匹配方式：Mkcert
Ubuntu apt95%
mkcert 1.4.4-1ubuntu2
Simple zero-config tool to make locally trusted certificates
https://github.com/FiloSottile/mkcert
sudo apt install mkcert- Section: universe/utils
- Architecture: amd64
- 1 依赖
- normalized package name match
- 匹配方式：Mkcert
apk95%
mkcert 1.4.4-r29
simple zero-config tool to make locally trusted development certificates with any names you'd like
sudo apk add mkcert- License: BSD-3-Clause
- Architecture: x86_64
- Source Package: mkcert
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Mkcert
dnf95%
mkcert 1.4.4-9.fc45
Make and install locally trusted development certificates
https://github.com/FiloSottile/mkcert
sudo dnf install mkcert- License: BSD-2-Clause-Views AND BSD-3-Clause
- Category: Unspecified
- Architecture: x86_64
- Source Package: mkcert
- 4 依赖
- 2 提供
- normalized package name match
- 匹配方式：Mkcert
pacman95%
mkcert 1.4.4-3
Simple tool for making locally-trusted development certificates
https://github.com/FiloSottile/mkcert
sudo pacman -S mkcert- License: BSD
- Architecture: x86_64
- 1 依赖
- normalized package name match
- 匹配方式：Mkcert
zypper95%
mkcert 1.4.4-1.4
CLI tool for making locally-trusted development certificates
https://github.com/FiloSottile/mkcert
sudo zypper install mkcert- License: BSD-3-Clause
- Category: Development/Tools/Other
- Architecture: x86_64
- Source Package: mkcert
- 2 依赖
- 1 提供
- normalized package name match
- 匹配方式：Mkcert
MacPorts95%
mkcert
sudo port install mkcert- normalized package name match
- 匹配方式：Mkcert
Chocolatey95%
mkcert
choco install mkcert- normalized package name match
- 匹配方式：Mkcert
Scoop95%
extras/mkcert
scoop install extras/mkcert- normalized package name match
- 匹配方式：Mkcert
winget95%
FiloSottile.mkcert
winget install --id FiloSottile.mkcert -e- normalized package name match
- 匹配方式：Mkcert
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- approval-gate seed metadata
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment