Skip to content

Conversation

@akoeplinger
Copy link
Member

@akoeplinger akoeplinger commented Aug 31, 2021

It started to fail because the validity of the MicrosoftDotComSslCertBytes expired on 2021-08-29 22:17:02Z.
Since this test doesn't need to validate a specific expiration time we can just set the VerificationTime on the chain like we do in other tests.

Fixes #58416

…tOfRangeException test on Android

It started to fail because the validity of the MicrosoftDotComSslCertBytes expired on 2021-08-29 22:17:02.
Since this test doesn't need to validate a specific expiration time we can just set the VerificationTime on the chain like we do in other tests.

Fixes dotnet#58416
@ghost ghost added the area-System.Security label Aug 31, 2021
@ghost
Copy link

ghost commented Aug 31, 2021

Tagging subscribers to this area: @bartonjs, @vcsjones, @krwq, @GrabYourPitchforks
See info in area-owners.md if you want to be subscribed.

Issue Details

It started to fail because the validity of the MicrosoftDotComSslCertBytes expired on 2021-08-29 22:17:02.
Since this test doesn't need to validate a specific expiration time we can just set the VerificationTime on the chain like we do in other tests.

Fixes #58416

Author: akoeplinger
Assignees: -
Labels:

area-System.Security

Milestone: -

@akoeplinger akoeplinger requested a review from bartonjs August 31, 2021 14:55
@danmoseley
Copy link
Member

Why is it affecting Android specifically?

@danmoseley
Copy link
Member

JSON tests failed with heap corruption?

@vcsjones
Copy link
Member

vcsjones commented Sep 1, 2021

Why is it affecting Android specifically?

Because Android's chain builder has OS specific behavior.

Other platforms, with an expired certificate, will at least build the chain and we get the chain back, plus an "it's expired" flag.

Android does not bother to build a chain for a an expired cert, it immediately bails out. So we don't get the chain collection back (thus the exception)

@akoeplinger akoeplinger merged commit c156ebe into dotnet:main Sep 1, 2021
@akoeplinger akoeplinger deleted the fix-android-crypto branch September 1, 2021 08:40
@akoeplinger
Copy link
Member Author

/backport to release/6.0

@github-actions
Copy link
Contributor

github-actions bot commented Sep 1, 2021

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[libraries][Android] System.Security.Cryptography.X509Certificates No IndexOutOfRangeException thrown

5 participants