ASP.NET Core developer certificate

Support Software & Applications
1

I am a dotnet developer and there is one error which just drives me nuts. I cannot get Manjaro to accept the dotnet developer certificate. In whatever programme I develop, I get this message:
2024-10-02 08:09:20.2751|WARN|Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServer||||The ASP.NET Core developer certificate is not trusted. For information about trusting the ASP.NET Core developer certificate, see https://aka.ms/aspnet/https-trust-dev-cert.|||ListenOptionsHttpsExtensions.UseHttps => KestrelServerOptions.ApplyDefaultCertificate => KestrelServerOptions.GetDevelopmentCertificateFromStore

This has a lot of nasty sideeffects in other places.

I tried to accept it in various ways. The certificate is situated at
/home/username/.dotnet/corefx/cryptography/x509stores/my

I also converted it to a crt file by using this command:
openssl pkcs12 -in somehash.pfx -clcerts -nokeys -out dev-cert.crt

I also tried to make a new one with

dotnet dev-certs https --clean
 dotnet dev-certs https --trust

Tried to trust it in Firefox by important it there (which of course isn’t fixing the terminal error).

I tried to import it system wide:

sudo cp dev-cert.crt /etc/ca-certificates/trust-source/anchors/
sudo trust extract-compat

Nothing the Internet provides me helped

Is there anybody who has tried that before and fixed it?

Kernel version is 6.1.106-1-MANJARO, I use 8.0.107

2

Another member @ZeR0ByTe did some resarch into the topic

→ [How To] Migrate dotnet core project signing certificate to Linux Workstation

3

Hi,
Thank you for your answer! I did not find this topic, but it looks like exactly my problem, yes.

However, the script does not work for me actually.
I usually get this one here back:

Error outputting keys and certificates
40772581557F0000:error:1C800064:Provider routines:ossl_cipher_unpadblock:bad decrypt:providers/implementations/ciphers/ciphercommon_block.c:107:
40772581557F0000:error:11800074:PKCS12 routines:PKCS12_pbe_crypt_ex:pkcs12 cipherfinal error:crypto/pkcs12/p12_decr.c:92:maybe wrong password
Failed to extract thumbprint. Check the certificate file.

I have the hunch that running it with “” as password might be the problem here. The dotnet certs are always without password. I checked it manually. But it seems like it rejects me to decrypt it without password somehow anyway.

4

Ok, I tried the script and its actually worse than I expected, it seems like I destroyed something here.

The .dotnet/corefx/cryptography/x509stores/my
folder is completely empty, but still
dotnet dev-certs https --trust
claims that a certificate is already present.
–clean does not fix this and it will continue to claim there is a certificate.

–check even tells me the hash of it, but I just cannot find it anywhere.
But no dotnet programmes will run until I fix this, because now, I get SSL errors everywhere.
Shouldn’t have tried to fix this.

Anybody having a smart idea to fix this?