only trust the CA, not the individual cert

Author: adrum

cli/Valet/Site.php

@@ -526,6 +526,14 @@ public function createCa(int $caExpireInDays): void
         $caKeyPath = $this->caPath('LaravelValetCASelfSigned.key');
 
         if ($this->files->exists($caKeyPath) && $this->files->exists($caPemPath)) {
+
+            $isTrusted = $this->cli->run(sprintf(
+                'security verify-cert -c "%s"', $caPemPath
+            ));
+
+            if (strpos($isTrusted, '...certificate verification successful.') === false) {
+                $this->trustCa($caPemPath);
+            }
             return;
         }
 
@@ -608,8 +616,6 @@ public function createCertificate(string $url, int $caExpireInDays): void
                 $caExpireInDays, $caPemPath, $caKeyPath, $caSrlParam, $csrPath, $crtPath, $confPath
             ));
         }
-
-        $this->trustCertificate($crtPath);
     }
 
     /**