[docs] Document certutil-missing warning in aspire doctor and certs clean - #1436
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist)
left a comment
There was a problem hiding this comment.
Validated against microsoft/aspire#18580. The Linux certutil warning and best-effort cleanup behavior are documented accurately.
There was a problem hiding this comment.
Pull request overview
Documents new Linux behavior in the Aspire CLI around missing certutil: aspire doctor now warns when certutil is unavailable (browser trust may be incomplete), and aspire certs clean no longer hard-fails when certutil is missing (NSS cleanup is skipped best-effort).
Changes:
- Added a Linux-specific note and example warning output for
aspire doctorwhencertutilis missing. - Added a Linux-specific note for
aspire certs cleanexplaining NSS DB cleanup is skipped ifcertutilis unavailable, while other cleanup continues.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| src/frontend/src/content/docs/reference/cli/commands/aspire-doctor.mdx | Adds documentation and sample output for the new Linux certutil-missing warning surfaced by aspire doctor. |
| src/frontend/src/content/docs/reference/cli/commands/aspire-certs-clean.mdx | Documents best-effort NSS cleanup behavior on Linux when certutil isn’t installed, and points users to aspire doctor. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Frontend HTML artifact readyThe latest frontend build uploaded the This comment updates automatically when a new frontend build artifact is uploaded. |
Documents changes from microsoft/aspire#18580
@danegstaTargeting
release/13.5based on the source PR milestone13.5(exact match).Why
PR microsoft/aspire#18580 changes Linux certificate cleanup so
aspire certs cleanno longer hard-fails whencertutilis unavailable — NSS database cleanup is now best-effort. It also adds a newaspire doctorwarning on Linux whencertutilis missing, since Firefox/Chromium browser certificate trust may be incomplete without it. New localized CLI resource strings (DevCertsMissingCertUtilMessage,DevCertsMissingCertUtilDetails,DevCertsMissingCertUtilFix) back this warning. This is a new user-facing behavior with no prior documentation coverage.What changed
reference/cli/commands/aspire-doctor.mdx: Added a note under Environment checks describing the newcertutil-missing warning, and a sample output snippet showing the warning message and fix suggestion (Install certutil from your distribution's NSS tools package (for example, libnss3-tools).).reference/cli/commands/aspire-certs-clean.mdx: Added a note explaining that on Linux, missingcertutilcauses NSS database cleanup to be skipped (not a hard failure), with cleanup of other certificate stores still completing, and a pointer toaspire doctorfor diagnosing the issue.Both pages were updated in place; no new pages were created.