Trusted Root CA & Green HTTPS

Generate 4096-bit RSA Root Certificates and trust them in the macOS System Keychain for zero browser warnings.

How Stratos Handles Local HTTPS

Browsers like Chrome, Safari, and Firefox display security warnings for untrusted self-signed SSL certificates. Stratos solves this by acting as a local Certificate Authority (CA).

Key Architecture

Generates a custom 4096-bit RSA Root Certificate stored in ~/Library/Application Support/Stratos/ca.
Installs and trusts the Root CA directly in the macOS System Keychain via security add-trusted-cert.
Generates per-domain TLS certificates with Subject Alternative Name (SAN) extensions covering:
```
subjectAltName=DNS:myproject.test,DNS:*.myproject.test
```

1-Click Trust Setup

Open Settings → PHP & Security → Trusted Local Root CA.
Click Trust Root CA in Keychain.
Enter your macOS admin password when prompted by the System Keychain.
Restart Safari or Chrome — all https://*.test domains will display green trusted lock badges.