Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
add-trusted-cert
Advanced tools
An API for calling the security add-trusted-cert
command in macOS to add certificates to the system keychain.
This is useful if you are generating a root CA / self-signed certificate and want to auto-register it into the keychain.
For more information, see man security
and search for the add-trusted-cert
command.
npm i add-trusted-cert
security
to write to the keychain,
followed by another confirmation to add the certificate to the trust store.policyConstraint
flags to work with trustAsRoot
for resultType
security
parameters, it's very much a black box in generalimport { addTrustedCert, POLICY_CONSTRAINTS, RESULT_TYPES } from 'add-trusted-cert'
(async () => {
// Add a root certificate / certificate authority
// This will set the policy for the cert to 'Always Trust'
// Be aware of the security implications of allowing the cert to be trusted for everything
await addTrustedCert({
addToAdminCertStore: true,
resultType: RESULT_TYPES.TRUST_ROOT,
}, 'root.crt')
})()
To see the command line output that is generated, add:
DEBUG=add-trusted-cert <your node app start command>
Promise.<string>
Add certificate (in DER or PEM format) from certFile to per-user or local Admin Trust Settings. When modifying per-user Trust Settings, user authentication is required via an authentication dialog. When modifying admin Trust Settings, the process must be running as root, or admin authentication is required.
Returns: Promise.<string>
- Output of the security add-trusted-cert
command
See: man security add-trusted-cert
Param | Type | Description |
---|---|---|
options | object | |
[options.addToAdminCertStore] | boolean | If true, adds the cert to the admin cert store |
[options.resultType] | string | |
[options.policyConstraint] | Array.<string> | string | Policy constraints |
[options.appPath] | string | Application constraint |
[options.policyString] | string | Policy-specific string |
[options.allowedError] | Array.<(string|number)> | number | string | |
[options.keyUsageCode] | number | Key usage. For more than one usage, add values together (except -1). |
[options.keychain] | string | Keychain to which the cert is added. Default is '/Library/Keychains/System.keychain'. |
[options.settingsFileIn] | string | Input trust settings file; default is user domain |
[options.settingsFileOut] | string | Output trust settings file; default is user domain |
certFile | string | Certificate file to add |
FAQs
Add trusted certificates to the macOS keychain via an API
We found that add-trusted-cert demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.