Lesson 4.3: SSL/TLS Certificates

SSL/TLS Certificates for Local Development

Understanding SSL/TLS

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are cryptographic protocols that provide secure communication over networks.

Why SSL/TLS for Local Services?

• Security: Encrypt data in transit
• Authentication: Verify service identity
• Browser Compatibility: Modern browsers require HTTPS
• API Requirements: Many APIs require secure connections

Certificate Types

1. Self-Signed Certificates

• Generated locally
• No certificate authority validation
• Browser warnings
• Good for development

2. Local Certificate Authority

• Create your own CA
• Sign certificates with your CA
• Install CA root certificate
• No browser warnings

MCT Services Certificate Strategy

Our approach uses mkcert for local development:

# Install mkcert
curl -JLO https://dl.filippo.io/mkcert/latest?for=linux/amd64
chmod +x mkcert-v*-linux-amd64
sudo mv mkcert-v*-linux-amd64 /usr/local/bin/mkcert

# Create local CA
mkcert -install

# Generate certificates
mkcert *.mct.lan localhost 127.0.0.1 ::1