Configure Browser To Trust Caddy Internal Tls Certificates

Table of Contents

Problem
#

The Caddy web server can auto-generate locally trusted internal TLS certificates. These are convenient for a development environment. But like self-signed certificates, your browser will complain that they’re not valid.

Solution
#

To make Google Chrome trust all certificates from the Caddy “authority”:

Copy Caddy’s root certificate from the server to your local computer. Mine is located in /usr/local/share/ca-certificates/ and symlinked to /etc/ssl/certs/ with the pattern Caddy_Local_Authority_-_2024_ECC_Root_145490142258935389386401433254531405431.pem.
Open Chrome Settings | Security | Manage Certificates.
Click on the Authorities tab.
Click on the Import button and select the PEM file to upload from your file manager.
Select the checkbox to “Trust this certificate for identifying websites”
Restart the browser: (chrome://restart).