mkcertWeb

v4.3.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 10d Developer Productivity

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

authority certificate certificates development https linux

+6 more

localhost macos open-ssl root-ca tls windows

Summary

AI summary

Adds per-certificate notes with inline editing and API access.

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds per-certificate notes up to 2000 characters. Adds per-certificate notes up to 2000 characters. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	Adds `PUT /api/certificates/:folder/:certname/notes` endpoint for editing notes. Adds `PUT /api/certificates/:folder/:certname/notes` endpoint for editing notes. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	`GET /api/certificates` now includes a `note` field on annotated certificates. `GET /api/certificates` now includes a `note` field on annotated certificates. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	Notes persist in `data/certificate-notes.json` with atomic writes; malformed file treated as empty. Notes persist in `data/certificate-notes.json` with atomic writes; malformed file treated as empty. Source: llm_adapter@2026-07-17 Confidence: high	—

Full changelog

Adds per-certificate notes, resolving #41. No API or configuration changes are required to upgrade.

Certificate notes. Every certificate card — generated, uploaded, archived, interface-SSL, and the Root CA — can hold one free-text note (up to 2,000 characters, plain text, line breaks preserved) to document what the certificate is for. Notes are edited inline on the card and are independent of the certificate files: they survive archive/restore, server restarts, and container recreates, and are removed when the certificate is permanently deleted.
New endpoint PUT /api/certificates/:folder/:certname/notes (auth + CSRF protected, rate limited); GET /api/certificates now includes a note field on annotated certificates.
Notes persist in data/certificate-notes.json (atomic writes; a malformed file is treated as empty rather than breaking certificate listing). Docker deployments already mount data/ via the mkcert_data volume, so no compose changes are needed.

Full Changelog: https://github.com/jeffcaldwellca/mkcertWeb/compare/v4.2.1...v4.3.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track mkcertWeb

Get notified when new releases ship.

About mkcertWeb

Web based user interface for mkcert CLI internal CA