FiloSottile/mkcert

Add CA root to Insomnia

Open

#249 opened on Mar 23, 2020

View on GitHub
 (9 comments) (7 reactions) (0 assignees)Go (58,912 stars) (3,115 forks)batch import
help wantedroot store

Description

Hello,

After running a mkcert -install and generating certificates with it, It works fine on Chrome & Firefox.

But, when I'm trying to send a request with insomnia, It tells me that the certificate can not be trusted.

Is there any way to specify to mkcert other "db" where the rootCA must be installed with certutil ?

Thanks for this great package !

Contributor guide

Tech stack
goshell
Domain
clisecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
basic Go knowledgefamiliarity with NSS certutil
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
30
Research direction
The request is to allow specifying a custom NSS database path for certutil so that mkcert installed certificates work in Insomnia. Investigate the current implementation in mkcert, particularly the code that runs certutil (likely in the root installation logic). Look for existing flags or configurations that control certutil behavior. The solution would involve adding a new command line flag (e.g., install db) that overrides the default NSS database path. Consider cross platform compatibility (Linux, macOS, Windows). Review comments in the issue for any user provided workarounds or maintainer feedback.