Arch Linux

balance

Member

Registered: 2017-02-17

Posts: 64

What is the trust store for?

Hello,

I know this is probably a very basic question but I wasn't able to find a fulfilling answer.

I use caddy for a local reverse proxy. I have a VueJS and NestJS app running (both express under the hood) on localhost:3000 and localhost:3001. The reverse proxy enables me to use www.foo.dev => localhost:3000 and www.foo.dev/api => localhost:3001.

Now I want to enable HTTPS, so I signed myself a certificate which resulted in a foo.cert and foo.key file. I know that my browser will probably not trust it and that I'd have to add it as an exception in Firefox.

I've read that I should add the foo.cert file to my trust store, but why exactly? And if I added it, could I remove the foo.cert file i.e. does "trust anchor foo.cert" actually move the file or does it just register the file?

What about they foo.key?