Skip to content

Conversation

@danegsta
Copy link
Member

Add IPv4 and IPv6 Loopback Addresses to the development certificate

Adds 127.0.0.1 and ::1 to the development certificate SAN

Description

Adds the IPv4 (127.0.01) and IPv6 (::1) loopback addresses to the development certificate Subject Alternative Names for the dev cert. This will allow the certificate to be used to secure services such as a SQL Server or Azurite container where there are client restrictions that require accessing the service by IP address instead of hostname.

Fixes #64430

@github-actions github-actions bot added the needs-area-label Used by the dotnet-issue-labeler to label those issues which couldn't be triaged automatically label Nov 19, 2025
Copilot finished reviewing on behalf of danegsta November 19, 2025 01:37
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR enhances the ASP.NET Core development certificate by adding IPv4 (127.0.0.1) and IPv6 (::1) loopback IP addresses to the certificate's Subject Alternative Names (SAN). This enables the certificate to work with client restrictions that require accessing services by IP address instead of hostname, such as SQL Server or Azurite containers.

Key changes:

  • Added loopback IP addresses (127.0.0.1 and ::1) to the development certificate SAN
  • Incremented certificate version from 5 to 6 to reflect the format change
  • Added System.Net namespace import for IPAddress class usage

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
src/Shared/Shared.sln Solution file included in PR (no actual changes)
src/Shared/CertificateGeneration/CertificateManager.cs Adds IPv4/IPv6 loopback addresses to certificate SANs, increments certificate version to 6, and adds System.Net import

@danegsta danegsta enabled auto-merge (squash) November 19, 2025 17:44
@danegsta danegsta merged commit 484de64 into dotnet:main Nov 19, 2025
30 checks passed
@dotnet-policy-service dotnet-policy-service bot added this to the 11.0-preview1 milestone Nov 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-area-label Used by the dotnet-issue-labeler to label those issues which couldn't be triaged automatically

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add loopback addresses to the development certificate SAN

3 participants