{"action":"opened","issue":{"url":"https://api.github.com/repos/inconshreveable/ngrok/issues/257","labels_url":"https://api.github.com/repos/inconshreveable/ngrok/issues/257/labels{/name}","comments_url":"https://api.github.com/repos/inconshreveable/ngrok/issues/257/comments","events_url":"https://api.github.com/repos/inconshreveable/ngrok/issues/257/events","html_url":"https://github.com/inconshreveable/ngrok/issues/257","id":102672589,"number":257,"title":"Allow override of trusted root CA via flag / config","user":{"login":"chris-prince","id":1691056,"avatar_url":"https://avatars.githubusercontent.com/u/1691056?v=3","gravatar_id":"","url":"https://api.github.com/users/chris-prince","html_url":"https://github.com/chris-prince","followers_url":"https://api.github.com/users/chris-prince/followers","following_url":"https://api.github.com/users/chris-prince/following{/other_user}","gists_url":"https://api.github.com/users/chris-prince/gists{/gist_id}","starred_url":"https://api.github.com/users/chris-prince/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chris-prince/subscriptions","organizations_url":"https://api.github.com/users/chris-prince/orgs","repos_url":"https://api.github.com/users/chris-prince/repos","events_url":"https://api.github.com/users/chris-prince/events{/privacy}","received_events_url":"https://api.github.com/users/chris-prince/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-08-23T23:46:07Z","updated_at":"2015-08-23T23:46:07Z","closed_at":null,"body":"After encountering many issues with trying to run self-hosted ngrok (and eventually giving up), I have a feature request that may solve most problems: could you add a setting allowing users to specify a custom root CA to trust?\r\n\r\nAs an example of the problems this is meant to solve:\r\n\r\n* When using a self-signed TLS certificate, it is currently necessary to recompile the ngrok client and server. (And even then, I believe you can only compile an ngrok v1 client, as the 2.0 sources are not available.)\r\n\r\n* When using a CA-signed TLS certificate, the 'trust_host_root_certs' setting does not always work. (I exprienced this with a StartSSL-signed certificate and the ngrok 2.0 Windows client. There are also reported issues with the flag when using the ngrok Mac client.)\r\n\r\nI believe these problems could be solved if I could specify the trusted root CA as an argument, rather than relying solely on the root CA compiled into the binary.  Is there any technical reason this could not be done?\r\n"}}