Meet tlsx

tlsx answers a simple question: why is HTTPS still an afterthought in local development?

Zero-config local certificates

tlsx creates a local certificate authority, trusts it in your system keychain, and mints leaf certificates for any domain you develop against:

import { generateCertificate } from '@stacksjs/tlsx'

const cert = await generateCertificate({
  domain: 'my-app.localhost',
  rootCA: { organization: 'Local Development CA' },
})

No OpenSSL incantations, no browser warnings, no "proceed anyway" clicks. Browsers see a chain they already trust.

Why it matters

Modern web APIs increasingly require secure contexts: service workers, WebAuthn passkeys, clipboard access, secure cookies. If your local environment is plain HTTP, you are not testing what you ship. tlsx makes https:// the default posture for every project, which is exactly how rpx and the Stacks dev server use it.

It is a library and a CLI, so you can automate certificates in your own tooling too.

Grab it at github.com/stacksjs/tlsx.