Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update pfx to pick better provider #234

Merged
merged 1 commit into from
Apr 11, 2022
Merged

update pfx to pick better provider #234

merged 1 commit into from
Apr 11, 2022

Conversation

wfurt
Copy link
Member

@wfurt wfurt commented Apr 3, 2022

This is related to dotnet/runtime#58927

It seems like the TLS 1.3 is failing because when we import, we pick old CAPI provider. This is generally bug in Schannel but we should be able to move on if we do something better. I don't fully understand what this is happening but the pox crreated according to @bartonjs instructions do work - I did ~ 800 runs without any issue.

before

Server certificate = CN=testservereku.contoso.com, HasPrivateKey True is X509Certificate2 True
  CNG wrapper or CNG key.
  Microsoft Enhanced Cryptographic Provider v1.0

now

Server certificate = CN=testservereku.contoso.com, HasPrivateKey True is X509Certificate2 True
  CNG wrapper or CNG key.
  Microsoft Software Key Storage Provider

@wfurt wfurt requested review from bartonjs and rzikm April 3, 2022 03:42
Copy link
Member

@rzikm rzikm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM if it looks good for Jeremy as well.

@wfurt wfurt merged commit c5e8abf into dotnet:main Apr 11, 2022
@wfurt wfurt deleted the provider branch April 11, 2022 21:20
@wfurt
Copy link
Member Author

wfurt commented Sep 27, 2023

/backport to release/6.0-staging

wfurt added a commit to wfurt/runtime-assets that referenced this pull request Sep 29, 2023
update pfx to pick better provider
ViktorHofer pushed a commit that referenced this pull request Oct 2, 2023
update pfx to pick better provider
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants