[HTTPS] Add instructions for trusting the developer certificate on Linux

[javiercn]

Within this section

Make a section for trusting the certificate in edge/chrome on Linux

• You need to have installed libnss3-tools on your distribution.
• There should be a folder $HOME/.pki/nssdb on the machine.
• Export the certificate with dotnet dev-certs https -ep /usr/local/share/ca-certificates/aspnet/https.crt --format PEM
• Run the following commands and restart the browser for it to take effect

  certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n localhost -i /usr/local/share/ca-certificates/aspnet/https.crt
  certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n localhost -i /usr/local/share/ca-certificates/aspnet/https.crt
  

Make a section for trusting the certificate in Firefox

• Export the certificate with dotnet dev-certs https -ep /usr/local/share/ca-certificates/aspnet/https.crt --format PEM
• Create file /usr/lib/firefox/distribution/policies.json with the following contents

  {
      "policies": {
          "Certificates": {
              "Install": [
                  "/usr/local/share/ca-certificates/aspnet/https.crt"
              ]
          }
      }
  }

Make a section for Ubuntu to make dotnet trust the certificate (for service-to-service communication).

• Requires openssl 1.1.1h and higher. For instructions on how to update openssl find a guide for your OS.
• Run the following two commands:

  sudo dotnet dev-certs https -ep /usr/local/share/ca-certificates/aspnet/https.crt --format PEM
  sudo update-ca-certificates
  

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: c7ddfb2f-5dea-5e31-2a27-02a4dc16104c
• Version Independent ID: 12ca0b9a-2638-a4ce-c45f-d4579c83dafb
• Content: Enforce HTTPS in ASP.NET Core
• Content Source: aspnetcore/security/enforcing-ssl.md
• Product: aspnet-core
• Technology: aspnetcore-security
• GitHub Login: @Rick-Anderson
• Microsoft Alias: riande