Windows Support

[klauern]

I know it's mentioned in the README that this support is coming soon, but I'd like to correlate it to an issue that can be tracked. :)

[sebdeckers]

Here is the Windows solution to entrust certificates in the OS store:
https://gitlab.com/sebdeckers/tls-keygen/blob/master/index.js#L202-224

Should be easy for someone to port this over to Golang.

Just found out about mkcert. Half a year ago I implemented a similar tool using Node.js for Mac/Lin/Win.

🗝 tls-keygen

• NPM: tls-keygen
• Code: GitLab.com/sebdeckers/tls-keygen

[cretz]

Alternatively you can use crypt32.dll, see this reference. Specifically, you can probably call CertAddEncodedCertificateToSystemStoreA with "ROOT" and the raw cert bytes (ASN I would guess).

Edit: I'll probably just make a PR for this functionality

[cretz]

Done, ref #46. I signed the CLA too.

[JacobDB]

Having this work with WSL, and not just CMD would be awesome. Not sure how that would work interfacing between the Linux environment and Windows though.

[adamdecaf]

Doesn't WSL (with Ubuntu) use the Ubuntu certificate store filepath? IIRC there was nothing windows specific when I tried it.

[cretz]

It all comes down to how it's compiled. If it's compiled with Linux Go in WSL, when run it will do the Linux thing. If it's compiled with Windows Go, it will do the Windows thing. Do in theory, due to the fact that WSL can execute Windows .exes, you can download/have two mkcert executables callable in WSL, one that does a Linux thing and one that does a Windows thing :-)

Note, it does not appear that WSL and Windows share root stores. There is this question out there: microsoft/WSL#3161

[Geczy]

Any updaet

[caspChristian]

Noticed that the binary is not signed on windows, which makes windows defender less than happy :/ Borderline bug in our situation.