Trusted Root CA & Green HTTPS

Generate 4096-bit RSA Root Certificates and trust them in the macOS login Keychain for zero browser warnings.

How Stratos Handles Local HTTPS

Browsers like Chrome, Safari, and Firefox display security warnings for untrusted self-signed SSL certificates. Stratos solves this by acting as a trusted local Certificate Authority (CA).

Key Architecture

Generates a custom 4096-bit RSA Root Certificate stored securely in ~/Library/Application Support/Stratos/ca.
Installs and trusts the Root CA directly in the macOS login Keychain via security add-trusted-cert.
Generates per-domain TLS certificates with Subject Alternative Name (SAN) extensions covering:
```
subjectAltName=DNS:myproject.test,DNS:*.myproject.test
```

1-Click Trust Setup

Open Settings → Security → Trusted Local Root CA or use the Onboarding Wizard.
Click Trust Root CA in Keychain.
Approve the trust prompt for your login Keychain if macOS requests confirmation.
Restart Safari or Chrome — all https://*.test domains will display green trusted lock badges.