easy_caddy 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1c38478a91bcf7a5ef93a10693e73d829b74ab1e88709fb38112c1120d30e499
-  data.tar.gz: c4923a78a738fdd89079df4f80f3f35ac3185a421be7b2e3ae3509d985168790
+  metadata.gz: 1fc68745e7124d44c7ab78398914db35245df3a6b006f828980bf821a8706ba4
+  data.tar.gz: 00dfd873695bba44c3ba3bc5fd9d5b4230d3e82c909974a6c41bfa8da00301da
 SHA512:
-  metadata.gz: 59e2de015249c22dc56aa731e9a059655a9548d27582947a6d1ba38bffd713950fc23db4e21867ffee2cb2ae7d6e36bd13a8fe4eff4356e06b25115df2f326c8
-  data.tar.gz: 4a2226c3ad545bdd047dfcb896636eaf52a9fa1bae1a8984d68a7bbf84300e0dc9fcc9c61fc64fe259f994c37b1d3f8fd12e4d413764e6b3775577302f569937
+  metadata.gz: 3d2a4144a2b580373b6a634c42eaf6412bc68fd3148f1b87f0601ae937bd5d941b51215592a56fffa73a5443adfc43f36bd86118cbdf22a3dd568dffa4416c48
+  data.tar.gz: 870dd719e3eae7a6a44b50e0230af97f926caa945f05be3856d9cad9a7ad4617eb389a9e2e7e46621e7c48d3ebccc7d1dbaf5b1656b944324e74bac597463a63

data/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.3] — 2026-06-13
+
+### Added
+
+- `ecaddy retrust` — re-trust the local Caddy CA certificate. Runs `caddy untrust`
+  then `caddy trust` in sequence, fixing `net::ERR_CERT_DATE_INVALID` errors that
+  appear when the local CA expires in the system keychain. Both steps trigger the
+  native macOS password prompt.
+
 ## [0.1.2] — 2026-06-09
 
 ### Added
@@ -63,5 +72,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   `SIGTERM`/`SIGINT`, and unregisters on exit — designed to drop into a
   Procfile alongside the Rails server.
 
+[0.1.3]: https://github.com/pniemczyk/easy_caddy/releases/tag/v0.1.3
 [0.1.2]: https://github.com/pniemczyk/easy_caddy/releases/tag/v0.1.2
 [0.1.0]: https://github.com/pniemczyk/easy_caddy/releases/tag/v0.1.0

data/README.md

@@ -268,11 +268,26 @@ ecaddy reload
 
 ---
 
+### `ecaddy retrust`
+
+Re-trust the local Caddy CA certificate. Run this when your browser shows
+`net::ERR_CERT_DATE_INVALID` on a `*.localhost` site — it means the local CA
+has expired in the system keychain.
+
+```bash
+ecaddy retrust
+```
+
+Runs `caddy untrust` (removes the old cert) then `caddy trust` (re-installs it).
+macOS will prompt for your password for each keychain operation.
+
+---
+
 ### `ecaddy version`
 
 ```bash
 ecaddy version
-# ecaddy 0.1.2
+# ecaddy 0.1.3
 ```
 
 ## Global config layout

data/lib/easy_caddy/caddy.rb

@@ -78,6 +78,16 @@ module EasyCaddy
       [out, $CHILD_STATUS.success?]
     end
 
+    def self.untrust
+      system("#{BINARY} untrust")
+    end
+
+    # @return [Array(String, Boolean)] combined output and whether the command succeeded
+    def self.untrust_with_output
+      out = `#{BINARY} untrust 2>&1`
+      [out, $CHILD_STATUS.success?]
+    end
+
     ADMIN_ENDPOINT = 'http://localhost:2019/pki/ca/local'
 
     # Polls Caddy's admin API until it responds or the timeout elapses.

data/lib/easy_caddy/cli.rb

@@ -15,6 +15,7 @@ require_relative 'commands/ensure'
 require_relative 'commands/run'
 require_relative 'commands/logs'
 require_relative 'commands/audit'
+require_relative 'commands/retrust'
 
 module EasyCaddy
   class CLI < Thor
@@ -99,6 +100,11 @@ module EasyCaddy
       Commands::Audit.new(site: options[:site], fix: options[:fix]).call
     end
 
+    desc 'retrust', 'Re-trust local CA certificate (fixes net::ERR_CERT_DATE_INVALID)'
+    def retrust
+      Commands::Retrust.new.call
+    end
+
     desc 'version', 'Print ecaddy version'
     def version
       puts "ecaddy #{EasyCaddy::VERSION}"

data/lib/easy_caddy/commands/retrust.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require_relative '../caddy'
+require_relative '../error'
+
+module EasyCaddy
+  module Commands
+    class Retrust
+      def call
+        raise Error, 'Caddy is not running. Start it with: brew services start caddy' unless Caddy.running?
+
+        puts '  Removing local CA from trust store...'
+        puts '    (you may be prompted for your password)'
+        output, success = Caddy.untrust_with_output
+        raise Error, "caddy untrust failed:\n#{output}" unless success
+
+        puts '  Re-trusting local CA...'
+        puts '    (you may be prompted for your password)'
+        output, success = Caddy.trust_with_output
+        raise Error, "caddy trust failed:\n#{output}" unless success
+
+        puts '  Done. Reload your browser — the certificate is now trusted.'
+      end
+    end
+  end
+end

data/lib/easy_caddy/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module EasyCaddy
-  VERSION = '0.1.2'
+  VERSION = '0.1.3'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: easy_caddy
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Pawel Niemczyk
@@ -134,6 +134,7 @@ files:
 - lib/easy_caddy/commands/register_helpers.rb
 - lib/easy_caddy/commands/reload.rb
 - lib/easy_caddy/commands/remove.rb
+- lib/easy_caddy/commands/retrust.rb
 - lib/easy_caddy/commands/run.rb
 - lib/easy_caddy/commands/setup.rb
 - lib/easy_caddy/commands/status.rb