Test failure: Unknown chain building error in System.Net.Security.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback

[carlossanlop]

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=664116
Build error leg or test failing: Libraries Test Run release coreclr windows x64 Release

Error Message

{
  "ErrorMessage" : [
    "ConnectWithRevocation_WithCallback",
    "CryptographicException : An unknown chain building error occurred."
],
  "BuildRetry" : false,
  "ExcludeConsoleLog" : false
}

• PR: [manual] Merge release/8.0-staging into release/8.0 #101832
• Queue: Libraries Test Run release coreclr windows x64 Release
• Job result: https://dev.azure.com/dnceng-public/public/_build/results?buildId=664116&view=logs&j=cb76e204-ba8f-557d-eba6-9896b4f24865&t=6d961345-b39a-56d5-e488-12bf17e2dc49&l=104
• Log file: https://helixre107v0xd1eu3ibi6ka.blob.core.windows.net/dotnet-runtime-refs-heads-release-80-staging-aeb81f9dbcbc4224a4/System.Net.Security.Tests/3/console.d9c7487a.log?helixlogtype=result
• Output:

    System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback(checkRevocation: True) [FAIL]
      System.Security.Cryptography.CryptographicException : An unknown chain building error occurred.
      Stack Trace:
        /_/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Chain.cs(192,0): at System.Security.Cryptography.X509Certificates.X509Chain.Build(X509Certificate2 certificate, Boolean throwOnException)
        /_/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Chain.cs(91,0): at System.Security.Cryptography.X509Certificates.X509Chain.Build(X509Certificate2 certificate)
        /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStreamCertificateContext.cs(63,0): at System.Net.Security.SslStreamCertificateContext.Create(X509Certificate2 target, X509Certificate2Collection additionalCertificates, Boolean offline, SslCertificateTrust trust, Boolean noOcspFetch)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(265,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        --- End of stack trace from previous location ---
    System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback(checkRevocation: False) [FAIL]
      System.Security.Cryptography.CryptographicException : An unknown chain building error occurred.
      Stack Trace:
        /_/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Chain.cs(192,0): at System.Security.Cryptography.X509Certificates.X509Chain.Build(X509Certificate2 certificate, Boolean throwOnException)
        /_/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Chain.cs(91,0): at System.Security.Cryptography.X509Certificates.X509Chain.Build(X509Certificate2 certificate)
        /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStreamCertificateContext.Windows.cs(29,0): at System.Net.Security.SslStreamCertificateContext..ctor(X509Certificate2 target, ReadOnlyCollection`1 intermediates, SslCertificateTrust trust)
        /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStreamCertificateContext.cs(121,0): at System.Net.Security.SslStreamCertificateContext.Create(X509Certificate2 target, X509Certificate2Collection additionalCertificates, Boolean offline, SslCertificateTrust trust, Boolean noOcspFetch)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(265,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs(313,0): at System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback_Core(X509RevocationMode revocationMode, Nullable`1 offlineContext, Boolean noIntermediates, String testName)
        --- End of stack trace from previous location ---

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=664116
Error message validated: [ConnectWithRevocation_WithCallback CryptographicException : An unknown chain building error occurred.]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 5/3/2024 4:02:56 AM UTC

Report

Build	Definition	Test	Pull Request
718949	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103922
718293	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103766
713739	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103646
712969	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103704
712671	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103695
711611	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103564
711234	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103590
710815	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103590
709562	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103458
707574	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103226
706066	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103324
705837	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103372
705719	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103322
703480	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103226
701187	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103058
699344	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#102379
700427	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103152
700188	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103052
699781	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#102656
698604	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#103058
694770	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback
691690	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#102793
689901	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#102628
689748	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#102769
687851	dotnet/runtime	System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback	#102498

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
2	8	25

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/ncl, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

[rzikm]

Weird, this should've been fixed with #99950

[rzikm]

I am unable to reproduce this locally :/ Putting this on hold for now to see if it happens more often.

[rzikm]

Seems to happen also in main, but in outerloop/extra platforms only