dotnet / dotnet/aspnetcore

Development Certificate Not Trusted by Firefox on Fedora 44

Open
#67,127 0 comments 0 reactions 0 assignees View on GitHub
area-commandlinetools
Dominant language
C#
Stars
38.4k
Forks
10.9k
Avg merge
2d 6h
Merged PRs (30d)
290

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Describe the bug

I am running a fresh install of Fedora Workstation 44.

* Installed `nss-tools` (contains `certutil`) via `dnf install nss-tools`
* Installed .NET SDK (`dnf install dotnet-sdk-10.0`)
* Added environment variable `$SSL_CERT_DIR`
* Run `dotnet dev-certs https --trust` (it says it was successful)
* Run an ASP.NET app using https and open the URL in Firefox
* Firefox displays a security page about insecure connections instead of the web app

### Expected Behavior

Trusting the developer certificate should be straightforward and work out of the box.

### Steps To Reproduce

_No response_

### Exceptions (if any)

_No response_

### .NET Version

10.0.108

### Anything else?

```bash
$ echo $SSL_CERT_DIR
/home/corne/.aspnet/dev-certs/trust:/etc/pki/tls/certs

$ dotnet dev-certs https --check --trust --verbose
[1] Listing certificates from CurrentUser\My
[2] Found certificates: 1 certificate
1) 216EDA6F9404C42*** - CN=localhost - Valid from 2026-06-10 14:30:22Z to 2027-06-10 14:30:22Z - IsHttpsDevelopmentCertificate: true - IsExportable: true
[3] Checking certificates validity
[4] Valid certificates: 1 certificate
1) 216EDA6F9404C42*** - CN=localhost - Valid from 2026-06-10 14:30:22Z to 2027-06-10 14:30:22Z - IsHttpsDevelopmentCertificate: true - IsExportable: true
[5] Invalid certificates: no certificates
[118] Meets minimum version certificates: 1 certificate
1) 216EDA6F9404C42*** - CN=localhost - Valid from 2026-06-10 14:30:22Z to 2027-06-10 14:30:22Z - IsHttpsDevelopmentCertificate: true - IsExportable: true
[119] Below minimum version certificates: no certificates
[6] Finished listing certificates.
A trusted certificate was found: 216EDA6F9404C42*** - CN=localhost - Valid from 2026-06-10 14:30:22Z to 2027-06-10 14:30:22Z - IsHttpsDevelopmentCertificate: true - IsExportable: true
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.