The .NET dotnet dev-certs tool doesn't support trusting the ASP.NET Core HTTPS development certificate on Linux.
This repo contains a .NET global tool that creates and installs a developer certificate on Linux.
note the tool uses sudo to update the system CA store and install required system tools.
dotnet tool update -g linux-dev-certs
dotnet linux-dev-certs install
You can add the --no-deps argument to stop the tool from installing system tools and print out the list of packages to install instead.
If you get an error saying Could not execute because the specified command or file was not found., try adding the .NET tools folder to PATH: PATH=$PATH:~/.dotnet/tools.
- Fedora and derived (RHEL, AlmaLinux, ...)
- Debian and derived (Ubuntu, ...)
- Arch Linux
- Gentoo
Limitations:
- Ubuntu browsers are packaged as snaps. Snaps do not use system certificates. If the user uses a snap-based Firefox, the CA certificate is added to its certificate store. Other browsers are (currently) not configured.
- On gentoo, binary versions of browsers do not support system certificates. If the user uses a binary-based Firefox/LibreWolf, the CA certificate is added to its certificate store. Other browsers are (currently) not configured.
To work across a range of distro applications, the tool generates a CA certificate which is added to the system store. This CA certificate is used to create an ASP.NET Core developer certificate that will be picked up by ASP.NET Core. The private key of the CA certificate is not stored and therefore it can not be used to sign additional certificates.