Skip to content

docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly right before DDEV v1.25.2)#591

Merged
rfay merged 3 commits intoddev:mainfrom
rfay:20260328_tls_wsl2
Apr 17, 2026
Merged

docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly right before DDEV v1.25.2)#591
rfay merged 3 commits intoddev:mainfrom
rfay:20260328_tls_wsl2

Conversation

@rfay
Copy link
Copy Markdown
Member

@rfay rfay commented Mar 28, 2026

Summary

  • Adds a WSL2-specific section to the DDEV Trusted HTTPS Certificates blog post explaining the "two-computer model" (Windows browser + Linux DDEV) and why a plain mkcert -install inside WSL2 is not enough for Windows browsers
  • Covers CAROOT/WSLENV propagation, the WSLg browser exception, Firefox variant trust store caveats, and ddev utility tls-diagnose (v1.25.2+) as the first diagnostic step
  • Prominently notes that the DDEV Windows installer handles all of this automatically and can be rerun to repair a broken configuration

Companion to ddev/ddev#8259 which adds ddev utility tls-diagnose.

Test plan

Rendered critical content at https://pr-591.ddev-com-fork-previews.pages.dev/blog/ddev-local-trusted-https-certificates/#wsl2-the-two-computer-model (and probably throughout the article)

  • Preview build renders the new WSL2 section correctly
  • Callout boxes render (tip, warning)
  • Internal link to ddev-name-resolution-wildcards.md resolves
  • External links (WSLg, mkcert, DDEV docs) are correct

🤖 Generated with Claude Code

@rfay rfay marked this pull request as draft March 28, 2026 14:29
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 28, 2026

🌐 Fork Preview for PR #591

https://pr-591.ddev-com-fork-previews.pages.dev

This preview updates automatically when you push changes to your fork.

@rfay rfay changed the title docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly after DDEV v1.25.2) Mar 31, 2026
@rfay rfay changed the title docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly after DDEV v1.25.2) docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly right before DDEV v1.25.2) Mar 31, 2026
…g post

Adds a WSL2-specific section explaining the two-computer model (Windows
browser + Linux DDEV), why CAROOT must point to the Windows filesystem,
CAROOT/WSLENV propagation, the WSLg exception, Firefox variant trust store
caveats, and ddev utility tls-diagnose (v1.25.2+) as the first diagnostic
step. Emphasizes that the DDEV Windows installer handles all of this
automatically and can be rerun to repair a broken configuration.

🤖 Developed with assistance from [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
@rfay rfay force-pushed the 20260328_tls_wsl2 branch from 5b7a651 to bad16bd Compare April 17, 2026 16:31
- Update modifiedDate to 2026-04-17
- Fix Firefox on Windows: modern Firefox has an automatic trust setting;
  manual import is only a fallback
- Expand tls-diagnose section to all platforms (not WSL2-only), add
  two-invocation examples, and update check list to match docs
- Add Firefox on Linux (libnss3-tools/certutil) to troubleshooting
- Fix bare fenced code block language specifier in TL;DR

🤖 Developed with assistance from [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
@rfay
Copy link
Copy Markdown
Member Author

rfay commented Apr 17, 2026

I updated this especially around the new ddev utility tls-diagnose tool, and new discoveries about Firefox on Windows.

@rfay rfay requested a review from stasadev April 17, 2026 16:52
@rfay rfay marked this pull request as ready for review April 17, 2026 16:52
Copy link
Copy Markdown
Member

@stasadev stasadev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

I added the TOC because this blog is too big to understand its structure.

@rfay rfay merged commit efc6a23 into ddev:main Apr 17, 2026
2 checks passed
@github-actions
Copy link
Copy Markdown

PR closed. The Cloudflare Pages preview is no longer updated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants