When bootstrapping a linux docker image with a self-signed certificate and corresponding private key, dotnetcore 2.0 applications were able to access the certificate but not the private key.
The same code running in windows was able to retrieve both certificate and private key.
Self-signed certificate was generated using instructions located on https://help.ubuntu.com/lts/serverguide/certificates-and-security.html
.pfx
conversion for use in windows testing was accomplished using openssl command: openssl pkcs12 -export -out server.pfx --inkey server.key -in server.crt
server.crt
placed in /etc/ssl/certs
server.key
(unencrypted, no passphrase) placed in /etc/ssl/private
server.pfx
imported to Trusted Root Certification Authorities\Certificates
(blank passphrase)