dotnet-devcert-trust

Diagnose and fix .NET HTTPS dev certificate trust issues on Linux distros.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/akoken/one-piece --skill dotnet-devcert-trust-akoken
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dotnet-devcert-trust
Source: https://github.com/akoken/one-piece/tree/main/skills/dotnet-devcert-trust
Command: npx skills add https://github.com/akoken/one-piece --skill dotnet-devcert-trust-akoken

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Linux environments require a trusted dev certificate for .NET HTTPS to function across services like Redis, dashboards, and inter-service calls; without proper system trust, TLS handshakes fail with errors such as UntrustedRoot.

Core Features & Use Cases

  • Diagnose Linux dev cert trust gaps on Linux when dotnet dev-certs https --trust doesn't update the system trust store.
  • Provide distro-specific export, installation, and CA bundle rebuild steps for Ubuntu/Debian, Fedora/RHEL, Arch, and WSL2.
  • Verify trust status with openssl verify and dotnet commands, and perform a full recovery if needed.

Quick Start

Follow the full recovery procedure to generate, export, install, and rebuild the system trust store.

Frequently Asked Questions about dotnet-devcert-trust

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does dotnet dev-certs https --trust fail to update the system trust store on Linux?

For WSL2 .NET HTTPS certificate trust, you need to export the generated dev certificate to PEM, install it into the Linux system CA store, and rebuild the CA bundle to resolve UntrustedRoot errors across your environment.

How do I export and install the .NET HTTPS dev certificate into the Linux CA store?

Verifying Linux dev cert trust involves running openssl verify against the exported certificate and executing dotnet commands to confirm the system trust store properly recognizes the newly installed root certificate.

Does this process support fixing dev cert trust on Arch and RHEL distributions?

Yes, resolving .NET dev cert trust issues covers Arch, Fedora, and RHEL by providing the specific export, installation, and CA bundle rebuild commands required for each distribution's unique trust store layout.

What is the full recovery procedure for an untrusted .NET development certificate?

The full recovery procedure regenerates the .NET HTTPS dev certificate, exports it to PEM, installs it into the system CA store, rebuilds the CA bundle, and verifies trust status using openssl and dotnet commands.

When do I need to manually rebuild the CA bundle for .NET dev certs?

You need to manually rebuild the CA bundle when TLS handshakes fail with UntrustedRoot errors, indicating that the newly generated .NET dev certificate has not been properly integrated into the Linux system trust store.