From 0b18e3749b21e46ddb417ad13344ab4738501ccb Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 12 Mar 2026 06:52:35 +0000
Subject: [PATCH 1/2] Initial plan


From d6e8a3ecc03847b3d546f59311d83b5dc2852a4e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 12 Mar 2026 06:56:35 +0000
Subject: [PATCH 2/2] Fix EphemeralKeySet platform support: use EphemeralKeySet
 on Windows/Linux, Exportable-only on macOS

Co-authored-by: henrikhimself <1175002+henrikhimself@users.noreply.github.com>
---
 src/RemoteContainers.Aspire/Docker/DockerCertificate.cs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/RemoteContainers.Aspire/Docker/DockerCertificate.cs b/src/RemoteContainers.Aspire/Docker/DockerCertificate.cs
index ace123f..e58938e 100644
--- a/src/RemoteContainers.Aspire/Docker/DockerCertificate.cs
+++ b/src/RemoteContainers.Aspire/Docker/DockerCertificate.cs
@@ -87,7 +87,9 @@ public void Dispose()
 
   private static X509Certificate2 Clone(X509Certificate2 cert)
   {
-    var keyStorageFlags = X509KeyStorageFlags.Exportable | X509KeyStorageFlags.PersistKeySet;
+    var keyStorageFlags = OperatingSystem.IsMacOS()
+      ? X509KeyStorageFlags.Exportable
+      : X509KeyStorageFlags.EphemeralKeySet | X509KeyStorageFlags.Exportable;
     var pfxBytes = cert.Export(X509ContentType.Pkcs12, string.Empty);
     return X509CertificateLoader.LoadPkcs12(pfxBytes, string.Empty, keyStorageFlags);
   }