dotnet / dotnet/docs

How can certs be added to the CurrentUser/My store on Linux?

Open
#34,908 1 comment 1 reaction 0 assignees View on GitHub
:watch: Not Triaged dotnet/svc standard-library/subsvc
Dominant language
No language data
Stars
4.8k
Forks
6.1k
Avg merge
15h 21m
Merged PRs (30d)
370

Description

The page explains which scenarios are supported, but (at least to me) the explanation of how to actually populate the Linux stores with a certificate remains vague. It says "class is a projection of system trust decisions (read-only), user trust decisions (read-write), and user key storage (read-write)" and also "no user stores exist by default".

Is it possible to provide a bit more detail (e.g. link to relevant instructions) about how one would actually put a cert in the store so that an app can find it?

The CurrentUser/My store is of interest because that is what appears to be used under the hood by `ProtectKeysWithCertificate` ([source](https://source.dot.net/#Microsoft.AspNetCore.DataProtection/XmlEncryption/CertificateResolver.cs,4bb51ad0fcdc9ffe)). It checks the CurrentUser/My and LocalMachine/My; the latter is not supported on Linux according to the docs page.

---
#### Document Details

⚠ *Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.*

* ID: 7dba5d39-737f-cfa3-b1e4-c997e55312a8
* Version Independent ID: 95e31f6e-9a36-913e-6a02-7fb1606e5a52
* Content: [Cross-platform cryptography in .NET Core and .NET 5](https://learn.microsoft.com/en-us/dotnet/standard/security/cross-platform-cryptography)
* Content Source: [docs/standard/security/cross-platform-cryptography.md](https://github.com/dotnet/docs/blob/main/docs/standard/security/cross-platform-cryptography.md)
* Product: **dotnet**
* Technology: **dotnet-standard**
* GitHub Login: @IEvangelist
* Microsoft Alias: **dapine**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.