dotnet-devcert-trust

Diagnoses and fixes .NET HTTPS dev certificate trust issues on Linux.

Updated Dec 4, 2022
One-click install
npx skills add https://github.com/devingoble/CloudOStat --skill dotnet-devcert-trust-devingoble
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dotnet-devcert-trust
Source: https://github.com/devingoble/CloudOStat/tree/main/.github/skills/dotnet-devcert-trust
Command: npx skills add https://github.com/devingoble/CloudOStat --skill dotnet-devcert-trust-devingoble

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill resolves issues where .NET development certificates are not trusted by the Linux operating system, preventing secure HTTPS connections and causing errors in applications like .NET Aspire.

Core Features & Use Cases

  • Diagnose Trust Issues: Identifies why .NET dev certificates fail system-level trust checks on Linux.
  • Automated Fixes: Provides step-by-step guidance and a full recovery script to correctly generate, export, and install the .NET dev certificate into the system's trusted certificate store.
  • Distro-Specific Guidance: Offers tailored instructions for Ubuntu/Debian, Fedora/RHEL, Arch Linux, and WSL2 environments.
  • Use Case: When your .NET Aspire application fails to connect to Redis with UntrustedRoot errors on a Linux development machine, this skill will guide you through the necessary steps to establish trust for the development certificate.

Quick Start

Run the full recovery procedure script to fix .NET dev certificate trust issues on your Linux system.

Frequently Asked Questions about dotnet-devcert-trust

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix .NET HTTPS development certificate trust issues on Linux?

Fixing .NET HTTPS development certificate trust issues on Linux involves running a recovery script to generate, export as PEM, and install the certificate into the system's trusted CA bundle. This resolves localhost HTTPS connection errors and establishes system-level trust.

Why does .NET Aspire fail to connect to Redis with an UntrustedRoot error on Linux?

The .NET Aspire Redis connection fails with an UntrustedRoot error because the .NET development certificate is not trusted by the Linux operating system. You must install the exported PEM certificate into the system's trusted certificate store to resolve this TLS failure.

How do I update CA certificates for dotnet dev certs on Ubuntu and Fedora?

To update CA certificates for dotnet dev certs on Ubuntu and Fedora, you must install the exported PEM certificate into the system's trusted certificate authority bundle and run the distro-specific update commands. This procedure ensures the local system trusts the HTTPS dev certificate.

Does this dotnet dev cert trust fix work for WSL2 and Arch Linux?

Yes, the .NET dev cert trust fix provides distro-specific instructions for WSL2 and Arch Linux, alongside Ubuntu and Fedora. It guides you through updating CA certificates and verifying trust using OpenSSL to ensure HTTPS connections work across these environments.

What is the best way to verify dotnet HTTPS dev cert trust using OpenSSL on Linux?

The best way to verify dotnet HTTPS dev cert trust using OpenSSL on Linux is to run a verification command after installing the exported PEM certificate into the system's trusted certificate authority bundle. This confirms the local system correctly recognizes the development certificate.

.NET localhost HTTPS connection not working on Linux, what should I check?

When localhost HTTPS connections are not working on Linux, check if the .NET dev certificate is correctly generated and installed into the system's trusted certificate authority bundle. Diagnose trust issues by verifying the certificate chain with OpenSSL to ensure system-level trust.