Skip to content

docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly right before DDEV v1.25.2)#591

Draft
rfay wants to merge 1 commit intoddev:mainfrom
rfay:20260328_tls_wsl2
Draft

docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly right before DDEV v1.25.2)#591
rfay wants to merge 1 commit intoddev:mainfrom
rfay:20260328_tls_wsl2

Conversation

@rfay
Copy link
Copy Markdown
Member

@rfay rfay commented Mar 28, 2026

Summary

  • Adds a WSL2-specific section to the DDEV Trusted HTTPS Certificates blog post explaining the "two-computer model" (Windows browser + Linux DDEV) and why a plain mkcert -install inside WSL2 is not enough for Windows browsers
  • Covers CAROOT/WSLENV propagation, the WSLg browser exception, Firefox variant trust store caveats, and ddev utility tls-diagnose (v1.25.2+) as the first diagnostic step
  • Prominently notes that the DDEV Windows installer handles all of this automatically and can be rerun to repair a broken configuration

Companion to ddev/ddev#8259 which adds ddev utility tls-diagnose.

Test plan

Rendered critical content at https://pr-591.ddev-com-fork-previews.pages.dev/blog/ddev-local-trusted-https-certificates/#wsl2-the-two-computer-model

  • Preview build renders the new WSL2 section correctly
  • Callout boxes render (tip, warning)
  • Internal link to ddev-name-resolution-wildcards.md resolves
  • External links (WSLg, mkcert, DDEV docs) are correct

🤖 Generated with Claude Code

…g post

Adds a WSL2-specific section explaining the two-computer model (Windows
browser + Linux DDEV), why CAROOT must point to the Windows filesystem,
CAROOT/WSLENV propagation, the WSLg exception, Firefox variant trust store
caveats, and ddev utility tls-diagnose (v1.25.2+) as the first diagnostic
step. Emphasizes that the DDEV Windows installer handles all of this
automatically and can be rerun to repair a broken configuration.

🤖 Developed with assistance from [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
@rfay rfay marked this pull request as draft March 28, 2026 14:29
@github-actions
Copy link
Copy Markdown

🌐 Fork Preview for PR #591

https://pr-591.ddev-com-fork-previews.pages.dev

This preview updates automatically when you push changes to your fork.

@rfay rfay changed the title docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly after DDEV v1.25.2) Mar 31, 2026
@rfay rfay changed the title docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly after DDEV v1.25.2) docs: expand WSL2 HTTPS trust model in trusted-https-certificates blog post (mostly right before DDEV v1.25.2) Mar 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant