We put the self-signed certificate in this directory as an example but your browser would complain that it isn't secure. So we recommend to use mkcert to trust it. To use local CA, you should run:

mkcert -install

If you want to generate your own cert/private key file, then run:

mkcert -key-file key.pem -cert-file cert.pem 127.0.0.1 localhost

$ cd https-tls/cert-watch
$ cargo run
starting HTTPS server at https://localhost:8443

Reload the server by modifying the certificate metadata:

$ touch cert.pem

• HTTPie: http --verify=no :8443
• cURL: curl -v --insecure https://127.0.0.1:8443
• Browser: navigate to https://127.0.0.1:8443