@geogirafe/lib-geoportal 1.2.0-dev.2900411085 → 1.2.0-dev.2901604715

package/README.md

@@ -76,18 +76,7 @@ git clone https://gitlab.com/geogirafe/gg-viewer.git
 ### 2. Development Certificates
 
 Certain features (e.g. service workers) require a valid HTTPS certificate for local development.  
-The project already ships with a set of pre-generated development certificates, which allow you to start developing immediately without extra setup.
-
-⚠️ However, generating your own certificates is strongly recommended for:
-
-- Better security and isolation between environments/developers.
-- Avoiding reuse of shared certificates.
-- Customizing certificate properties (hostname, expiration date, etc.).
-
-#### 2.1. If you want to generate your own development certificates
-
-Requirements: docker installed.  
-Run:
+You can generate your own development certificates with:
 
 ##### On Linux
 
@@ -103,15 +92,6 @@ npm run generate-dev-certs-nix
 npm run generate-dev-certs-win
 ```
 
-#### 2.2. If you did not generate your own certificates (Windows only)
-
-If you skipped the generation step on Windows, you must trust the pre-generated certificates so they work for features like service workers.  
-Run:
-
-```bash
-npm run trust-default-dev-certs-win
-```
-
 ### 3. Build and start GeoGirafe
 
 ```bash

package/buildtools/generate-dev-certs.cmd

@@ -2,13 +2,6 @@
 @echo off
 setlocal
 
-REM Ensure that Docker est installed
-where docker >nul 2>&1
-IF %ERRORLEVEL% NEQ 0 (
-  echo Docker not found. Please install it first [https://www.docker.com/products/docker-desktop]
-  exit /b 1
-)
-
 REM Where to generate the certificates
 IF "%~1"=="" (
   set "TARGET_DIR=buildtools\certs"
@@ -21,8 +14,8 @@ if not exist "%TARGET_DIR%" mkdir "%TARGET_DIR%"
 pushd "%TARGET_DIR%"
 
 REM Generate certificates
-docker run --rm -v %CD%:/root/.local/share/mkcert alpine/mkcert -install
-docker run --rm -v %CD%:/root/.local/share/mkcert alpine/mkcert -cert-file /root/.local/share/mkcert/app.localhost.cert.pem -key-file /root/.local/share/mkcert/app.localhost.key.pem app.localhost localhost 127.0.0.1
+CALL npx -y mkcert create-ca --organization GeoGirafe --key rootCA-key.pem --cert rootCA.pem
+CALL npx -y mkcert create-cert --ca-key rootCA-key.pem --ca-cert rootCA.pem --key app.localhost.key.pem --cert app.localhost.cert.pem --domains app.localhost localhost 127.0.0.1
 echo Certificate was created successfully.
 
 REM Add root certificate to trusted store (for the current user)

package/buildtools/generate-dev-certs.sh

@@ -1,65 +1,32 @@
 # SPDX-License-Identifier: Apache-2.0
 set +x
-
 YELLOW='\033[1;33m'
 NC='\033[0m'
 
-# Ensure that openssl is installed (it ships by default on virtually every Linux distribution)
-if ! command -v openssl &> /dev/null; then
-    echo "openssl not found. Please install it first (e.g. 'sudo apt install openssl' on Ubuntu)"
-    exit 1
-fi
-
-# Ask for sudo rights, it will be needed to trust the certificate
-sudo -v
+# Where to generate the certificates
+TARGET_DIR="${1:-buildtools/certs}"
 
 # Create directories
-TARGET_DIR="${1:-buildtools/certs}"
 mkdir -p "$TARGET_DIR"
 cd "$TARGET_DIR"
 
-DOMAINS="app.localhost,localhost"
-IPS="127.0.0.1"
-
-echo Generating development certificates
-
-# Generate a local root CA (self-signed), reused across runs if it already exists
-if [ ! -f rootCA.pem ] || [ ! -f rootCA-key.pem ]; then
-    openssl genrsa -out rootCA-key.pem 4096 2> /dev/null
-    openssl req -x509 -new -nodes -key rootCA-key.pem -sha256 -days 3650 \
-        -subj "/O=GeoGirafe Development CA/CN=GeoGirafe Local Dev Root CA" \
-        -addext "basicConstraints=critical,CA:TRUE" \
-        -addext "keyUsage=critical,keyCertSign,cRLSign" \
-        -out rootCA.pem
-fi
-
-# Build the Subject Alternative Name list for the leaf (server) certificate
-SAN=$(echo "$DOMAINS" | tr ',' '\n' | sed 's/^/DNS:/' | paste -sd,)
-SAN="$SAN,$(echo "$IPS" | tr ',' '\n' | sed 's/^/IP:/' | paste -sd,)"
-
-# Generate the leaf certificate for the dev server, signed by the local root CA
-openssl genrsa -out app.localhost.key.pem 2048 2> /dev/null
-openssl req -new -key app.localhost.key.pem \
-    -subj "/CN=app.localhost" \
-    -out app.localhost.csr.pem
-
-openssl x509 -req -in app.localhost.csr.pem \
-    -CA rootCA.pem -CAkey rootCA-key.pem -CAcreateserial \
-    -days 825 -sha256 \
-    -extfile <(printf "subjectAltName=%s\nextendedKeyUsage=serverAuth" "$SAN") \
-    -out app.localhost.cert.pem
-
-rm -f app.localhost.csr.pem
-
-sudo chmod a+r app.localhost.* rootCA.pem
+# Generate certificates
+npx -y mkcert create-ca --organization GeoGirafe --key rootCA-key.pem --cert rootCA.pem
+npx -y mkcert create-cert --ca-key rootCA-key.pem --ca-cert rootCA.pem --key app.localhost.key.pem --cert app.localhost.cert.pem --domains app.localhost localhost 127.0.0.1
+chmod a+r app.localhost.* rootCA.pem
+echo Certificate was created successfully.
 
+# NOTE : THIS NEED SUDO! 
+# DO WE REALLY WANT TO TRUST THE CERTS AT THE SYSTEM LEVEL DURING A DEFAULT INSTALLATION ?
+# ==> Deactivate for the moment.
 # Add root certificate to system trusted store
-echo Trusting development certificates at the system level
-sudo cp rootCA.pem /usr/local/share/ca-certificates/geogirafe-dev.crt
-sudo update-ca-certificates
+# echo Trusting development certificates at the system level
+# sudo cp rootCA.pem /usr/local/share/ca-certificates/geogirafe-dev.crt
+# sudo update-ca-certificates
 
-# Firefox, and older Chrome builds, keep their own certificate store (NSS) instead of relying on
-# the system one. Importing into it requires certutil, which is optional: if it isn't installed
+# Trust root certificate in Firefox/Chrome user stores (NSS).
+# No root rights needed.
+# Importing into it requires certutil, which is optional: if it isn't installed
 # we just skip this step and let the user trust the certificate manually in their browser.
 if command -v certutil &> /dev/null; then
     echo Trusting development certificates in Chrome
@@ -70,11 +37,10 @@ if command -v certutil &> /dev/null; then
     if [ -n "$FIREFOX_PROFILE" ]; then
         certutil -d sql:$HOME/.mozilla/firefox/$FIREFOX_PROFILE -A -t "C,,C" -n "GeoGirafe LocalDevCert" -i rootCA.pem
     fi
+    echo Certificate was added successfully.
+    echo Please restart your browser to take it into account.
 else
-    echo -e "${YELLOW}certutil not found (optional, part of the libnss3-tools package on Ubuntu/Debian).${NC}"
-    echo -e "${YELLOW}Skipping automatic trust in Firefox/Chrome's own certificate store.${NC}"
+    echo -e "${YELLOW}certutil not found (part of the libnss3-tools package on Ubuntu/Debian).${NC}"
+    echo -e "${YELLOW}Skipping automatic trust in Firefox/Chrome's certificate store.${NC}"
     echo -e "${YELLOW}Install libnss3-tools and re-run this script, or manually import $TARGET_DIR/rootCA.pem as a trusted authority in your browser settings.${NC}"
 fi
-
-echo Certificate was added successfully.
-echo Please restart your browser to take it into account.

package/package.json

@@ -5,7 +5,7 @@
     "name": "GeoGirafe PSC",
     "url": "https://doc.geogirafe.org"
   },
-  "version": "1.2.0-dev.2900411085",
+  "version": "1.2.0-dev.2901604715",
   "type": "module",
   "engines": {
     "node": ">=20.19.0"
@@ -175,15 +175,13 @@
     "prepare-commit": "npm run pretty && npm run tsc && npm run lint && npm run test && npm run build && npm run build-lib",
     "generate-dev-certs-win": "buildtools\\generate-dev-certs.cmd",
     "generate-dev-certs-nix": "bash -C './buildtools/generate-dev-certs.sh'",
-    "trust-default-dev-certs-win": "buildtools\\trust-dev-certs.cmd",
     "size-analysis": "node buildtools/app-clean.js && cross-env NODE_OPTIONS=--max-old-space-size=8192 vite build --mode analyze",
     "create-component": "tsx buildtools/create-component.ts"
   },
   "allowScripts": {
-    "@swc/core@1.15.24": true,
-    "esbuild@0.28.1": true,
-    "esbuild@0.25.12": true,
-    "odiff-bin@4.3.8": true,
-    "protobufjs@8.0.1": true
+    "@swc/core": true,
+    "esbuild": true,
+    "odiff-bin": true,
+    "protobufjs": true
   }
 }

package/templates/public/about.json

@@ -1 +1 @@
-{"version":"1.2.0-dev.2900411085", "build":"2900411085", "date":"01/10/2026"}
+{"version":"1.2.0-dev.2901604715", "build":"2901604715", "date":"01/10/2026"}