Add descriptive text

Author: javiercn

src/Shared/CertificateGeneration/CertificateManager.cs

@@ -178,22 +178,24 @@ public EnsureCertificateResult EnsureAspNetCoreHttpsDevelopmentCertificate(
                 {
                     // Skip this step if the command is not interactive,
                     // as we don't want to prompt on first run experience.
-                    // Check only the first certificate as is the one we plan to use.
-                    var status = CheckCertificateState(certificate, true);
-                    if (!status.Result)
+                    foreach (var candidate in certificates)
                     {
-                        try
+                        var status = CheckCertificateState(candidate, true);
+                        if (!status.Result)
                         {
-                            Log.CorrectCertificateStateStart(CertificateManagerEventSource.GetDescription(certificate));
-                            CorrectCertificateState(certificate);
-                            Log.CorrectCertificateStateEnd();
-                        }
-                        catch (Exception e)
-                        {
-                            Log.CorrectCertificateStateError(e.ToString());
-                            result = EnsureCertificateResult.FailedToMakeKeyAccessible;
-                            return result;
-                        }
+                            try
+                            {
+                                Log.CorrectCertificateStateStart(CertificateManagerEventSource.GetDescription(candidate));
+                                CorrectCertificateState(candidate);
+                                Log.CorrectCertificateStateEnd();
+                            }
+                            catch (Exception e)
+                            {
+                                Log.CorrectCertificateStateError(e.ToString());
+                                result = EnsureCertificateResult.FailedToMakeKeyAccessible;
+                                return result;
+                            }
+                        } 
                     }
                 }
                 else

src/Shared/CertificateGeneration/MacOSCertificateManager.cs

@@ -32,7 +32,7 @@ internal class MacOSCertificateManager : CertificateManager
         public const string KeyNotAccessibleWithoutUserInteraction =
             "Kestrel is trying to access the ASP.NET Core developer certificate key. " +
             "A prompt might appear to ask for permission to access the key. " +
-            "When that happens, select 'Always allow' to grant 'dotnet' access to the certificate key in the future.";
+            "When that happens, select 'Always Allow' to grant 'dotnet' access to the certificate key in the future.";
 
         private static readonly TimeSpan MaxRegexTimeout = TimeSpan.FromMinutes(1);
 

src/Tools/dotnet-dev-certs/src/Program.cs

@@ -209,6 +209,24 @@ private static int EnsureHttpsCertificate(CommandOption exportPath, CommandOptio
             var now = DateTimeOffset.Now;
             var manager = CertificateManager.Instance;
 
+            if (RuntimeInformation.IsOSPlatform(OSPlatform.OSX))
+            {
+                var certificates = manager.ListCertificates(StoreName.My, StoreLocation.CurrentUser, isValid: true, exportPath.HasValue());
+                foreach (var certificate in certificates)
+                {
+                    var status = manager.CheckCertificateState(certificate, interactive: true);
+                    if (!status.Result)
+                    {
+                        reporter.Warn("One or more certificates might be in an invalid state. We will try to access the certificate key " +
+                            "for each certificate and as a result you might be prompted one or more times to enter " +
+                            "your password to access the user keychain. " +
+                            "When that happens, select 'Always Allow' to grant 'dotnet' access to the certificate key in the future.");
+                    }
+
+                    break;
+                }
+            }
+
             if (RuntimeInformation.IsOSPlatform(OSPlatform.OSX) && trust?.HasValue() == true)
             {
                 reporter.Warn("Trusting the HTTPS development certificate was requested. If the certificate is not " +