← Catalog

CA

Coming soon

HTTPS on a LAN that will never see Let's Encrypt.

The isolated-box problem

Browsers still want certificates. The isolated LAN has no ACME, no public DNS, no second chances from the internet.

What it does

A tiny local certificate authority. Issue, trust, renew — all in the folder you carried in.

Carry-in

This is the carry-in flow once the tool ships — not a live install. Init on a connected machine, copy the folder, run it dark.

Carry-in flow

deno run --allow-read=. --allow-write=./ca ./init.ts ./ca

Related