Skip to content

Trust the Dev Proxy root certificate on Linux via 'devproxy cert ensure' #2029

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
waldekmastykarz wants to merge 12 commits into
base: main
Choose a base branch
from
Open

Trust the Dev Proxy root certificate on Linux via 'devproxy cert ensure' #2029

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
2b895e1
Trust the Dev Proxy root certificate on Linux via 'devproxy cert ensure'
waldekmastykarz Oct 31, 2026
12734cb
Harden Linux certificate trust per review feedback
waldekmastykarz Oct 31, 2026
d2e4e1f
Resolve root commands from system directories and use Linux path sepa…
waldekmastykarz Oct 31, 2026
7fb1fac
Skip Linux trust without non-interactive sudo and use Chromium's acti…
waldekmastykarz Oct 31, 2026
3a45eba
Check sudo permission for the actual Linux trust commands
waldekmastykarz Oct 31, 2026
3ecf9d4
Remove Linux NSS trust from both databases and save the cert on unkno…
waldekmastykarz Oct 31, 2026
b5bcf47
Report Linux NSS removal failures instead of skipping silently
waldekmastykarz Oct 31, 2026
d500e05
Handle Linux sudo password and NSS failures during cert trust
waldekmastykarz Oct 31, 2026
f9fd178
Harden Linux cert fallback export and NSS error handling
waldekmastykarz Oct 31, 2026
0a9fa03
Preserve existing Linux trust on rollback and verify cert removal
waldekmastykarz Oct 31, 2026
e0cacb1
Avoid NSS prompts without a terminal and harden anchor rollback
waldekmastykarz Oct 31, 2026
ef9a0e6
Use /dev/null as certutil's password file without a terminal
waldekmastykarz Oct 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion DevProxy.Abstractions/Proxy/IRootCertificateTrust.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ namespace DevProxy.Abstractions.Proxy;
/// This is the engine-host boundary for certificate trust: a proxy engine (e.g. the
/// Kestrel engine) owns minting/persisting its root but cannot reference the host's
/// platform trust helpers, so it calls this abstraction. The host supplies the
/// implementation (mac keychain, Windows root store, first-run prompt). Implementations
/// implementation (mac keychain, Windows root store, Linux system store, first-run prompt). Implementations
/// are expected to be idempotent and to honor the user's trust/first-run configuration.
/// </para>
/// </summary>
Expand Down
6 changes: 4 additions & 2 deletions DevProxy.Abstractions/Proxy/RootTrustPolicy.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,15 +16,17 @@ public enum RootTrustAction
/// <summary>Install the root into the Windows CurrentUser root store.</summary>
TrustWindowsStore,

/// <summary>Trust can't be automated on Linux; tell the user to trust manually.</summary>
/// <summary>
/// Linux trust needs sudo, so it's opt-in via <c>cert ensure</c>; tell the user to run it.
/// </summary>
ManualLinux,
}

/// <summary>
/// Pure decision table for OS-trust installation, factored out of the platform I/O so it
/// can be exhaustively unit-tested. Mirrors today's behavior: Windows installs into the
/// user root store whenever cert install is enabled; macOS trusts via the keychain only on
/// first run (and only if the user doesn't decline); Linux is manual.
/// first run (and only if the user doesn't decline); Linux is opt-in via <c>cert ensure</c>.
///
/// <code>
/// installCert == false ─────────────────────► Skip
Expand Down
Loading
Loading