On: Let's Encrypt's New Root and Intermediate Certific...

[galaxyLogic]

> Some of us could go through the trouble of setting up a private CA to deal with this issue

I've read about doing that for development purposes. But it sounds complicated. Therefore I wonder couldn't there be an open source solution that produces an npm module which when I run it creates a private CA for me?

I mean if it is complicated to create a private CA, why not automate that task?

[martijnvds → galaxyLogic]

"mkcert" is a tool to automate this: https://github.com/FiloSottile/mkcert

[omBratteng → galaxyLogic]

I've deployed step-ca internally and have my root certificate added through cloud-init for new servers. Also supports ACME https://smallstep.com/docs/getting-started/