I had great success using ngrok 1.x which is Open Source. We've compiled it, put it on staging server, hooked up Cloudflare and now every dev machine can expose https://devname.example.com using one command. The certificate is valid, which is very useful when debugging services like Google Drive API, which require trusted SSL.
Count this as another vote for software I wouldn't run unless it was Open Source. It doesn't have to be Free - but I won't run it until its been audited independently, and Open Source is clearly the best way to accomplish that ..