What is the "Password:" for which I'm prompted when I run mkcert -install on a Mac?

[kenny-evitt]

From a Terminal window:

$ mkcert -install
Created a new local CA at "/Users/kenny/Library/Application Support/mkcert" 💥
Password:

I'm pretty sure this is my Keychain password (the 'login' password for my user) but it's certainly not clear that that's what's being requested. Could this (or should) this be documented in the README? (I'd be willing to make a stab at doing so if it's considered helpful.)

[hauleth]

Current account password. The same you use when you do sudo true

[rfay]

This is a confusing thing that mkcert silently runs sudo. Maybe necessary, but a little more output would be useful, knowing that sudo may go ahead and prompt for password.

[hauleth]

Actually, at least in macOS Sierra, it is not needed to use sudo for security command line tool, as this will automatically ask user whether they allow changes and would even allow using TouchID to confirm such changes.

[adamdecaf]

I created #183 which removes sudo where we can, but since we add the mkcert root to the System Keychain sudo appears to be required still.

[FiloSottile]

We should probably always pass --prompt="Sudo password:" to sudo.

[kenny-evitt]

@FiloSottile That's a good idea too but a brief mention in the README would nicely set expectations too:

• Note sudo requirement by kenny-evitt · Pull Request #185 · FiloSottile/mkcert

[adamdecaf]

I like the idea of passing --promtp to sudo.