ContextQMD
Back to Aspnetcore

Trust Dev Cert Linux

aspnetcore/release-notes/aspnetcore-9/includes/trust_dev_cert_linux.md

latest1.2 KB
Original Source

Trust the ASP.NET Core HTTPS development certificate on Linux

On Ubuntu and Fedora based Linux distros, dotnet dev-certs https --trust now configures ASP.NET Core HTTPS development certificate as a trusted certificate for:

  • Chromium browsers, for example, Google Chrome, Microsoft Edge, and Chromium.
  • Mozilla Firefox and Mozilla derived browsers.
  • .NET APIs, for example, HttpClient

Previously, --trust only worked on Windows and macOS. Certificate trust is applied per-user.

To establish trust in OpenSSL, the dev-certs tool:

  • Puts the certificate in ~/.aspnet/dev-certs/trust
  • Runs a simplified version of OpenSSL's c_rehash tool on the directory.
  • Asks the user to update the SSL_CERT_DIR environment variable.

To establish trust in dotnet, the tool puts the certificate in the My/Root certificate store.

To establish trust in NSS databases, if any, the tool searches the home directory for Firefox profiles, ~/.pki/nssdb, and ~/snap/chromium/current/.pki/nssdb. For each directory found, the tool adds an entry to the nssdb.