Ask IH: How do you manage your local dev ssl?
My local dev machine runs on *.test.test, with a self signed ssl cert. This setup has some problems. Browsers complain it is not safe. Local curl connections complain the certificate is not trusted, ect. To fix curl, I've added my cert chain to the openssl.capath, but this results in errors with new outside certificates.
Do you have a better solution?
We bought a cheap domain which we point to 127.0.0.1. Then use a DNS challenge to generate a free Let's Encrypt certificate which is properly signed. These certificates are only valid for 3 months though (renewing is easy). I've worked at other places that pay for certificates that are valid longer.