Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

X509Store throws NotImplemented for read/Write on Linux #434

Closed
roncain opened this issue Oct 16, 2015 · 4 comments
Closed

X509Store throws NotImplemented for read/Write on Linux #434

roncain opened this issue Oct 16, 2015 · 4 comments
Assignees
Labels
test bug Test issues that need fixing.
Milestone

Comments

@roncain
Copy link
Contributor

roncain commented Oct 16, 2015

Https_ClientCredentialTypeTests.BasicAuthenticationInvalidPwd_throw_MessageSecurityException [FAIL]
Assert.Throws() Failure
Expected: typeof(System.ServiceModel.Security.MessageSecurityException)
Actual: typeof(System.NotImplementedException): The method or operation is not implemented.
Stack Trace:
at Internal.Cryptography.Pal.StorePal.FromSystemStore(String storeName, StoreLocation storeLocation, OpenFlags openFlags)
at System.Security.Cryptography.X509Certificates.X509Store.Open(OpenFlags flags)
at Infrastructure.Common.BridgeClientCertificateManager.AddToStoreIfNeeded(StoreName storeName, StoreLocation storeLocation, X509Certificate2 certificate)
at Infrastructure.Common.BridgeClientCertificateManager.InstallCertificateToRootStore(X509Certificate2 certificate)
at Infrastructure.Common.BridgeClientCertificateManager.InstallRootCertificateFromBridge()
at Endpoints.get_Https_BasicAuth_Address()
at Https_ClientCredentialTypeTests.<>c.<BasicAuthenticationInvalidPwd_throw_MessageSecurityException>b__4_0()

@roncain roncain added bug This is a product bug. Linux labels Oct 16, 2015
@iamjasonp
Copy link
Member

Test bug - related to BridgeClientCertificateManager. This is being looked at as part of #407

@iamjasonp
Copy link
Member

Is this a dupe of #417?

@roncain
Copy link
Contributor Author

roncain commented Oct 20, 2015

Let's retitle this one to be that the BridgeClientCertificateManager needs to be fixed. Once we get past that, we'll know of #417 can be closed or fails for a new reason

@roncain
Copy link
Contributor Author

roncain commented Oct 20, 2015

Changing BridgeClientCertificateManager to use CurrentUser gets past this failure. #438 tracks the failure after this point.

@zhenlan zhenlan added test bug Test issues that need fixing. and removed bug This is a product bug. labels Oct 20, 2015
@zhenlan zhenlan added this to the 2015.10 milestone Oct 20, 2015
iamjasonp added a commit to iamjasonp/wcf that referenced this issue Oct 21, 2015
In Windows, we stick our certificates in the LocalMachine store.
On *nix, however, we only have access to the User store. The BridgeClient needs
to be aware of where it's running and switch the cert store as necessary

Fixes dotnet#434
iamjasonp added a commit to iamjasonp/wcf that referenced this issue Oct 21, 2015
In Windows, we read/write our certificates from/to the LocalMachine store.
On *nix, however, we only have access to the User store. The BridgeClient needs
to be aware of where it's running and switch the cert store used as necessary

Fixes dotnet#434
iamjasonp added a commit to iamjasonp/wcf that referenced this issue Oct 22, 2015
In Windows, we read/write our certificates from/to the LocalMachine store.
On *nix, however, we only have access to the User store. The BridgeClient needs
to be aware of where it's running and switch the cert store used as necessary

Fixes dotnet#434
iamjasonp added a commit to iamjasonp/wcf that referenced this issue Oct 29, 2015
…ager

In Windows, we read/write our certificates from/to the LocalMachine store.
On *nix, however, we only have access to the User store. The BridgeClient needs
to be aware of where it's running and switch the cert store used as necessary

All user certs only to StoreName.My StoreLocation.CurrentUser
All root certs should go to StoreName.Root StoreLocation.LocalMachine on Windows
All root certs should go to StoreName.Root StoreLocation.CurrentUser on *nix

Tcp_ClientCredentialTypeTests.TcpClientCredentialType_Certificate_EchoString needs
to be modified as well to reflect this change

Fixes dotnet#434
iamjasonp added a commit to iamjasonp/wcf that referenced this issue Oct 29, 2015
…ager

In Windows, we read/write our certificates from/to the LocalMachine store.
On *nix, however, we only have access to the User store. The BridgeClient needs
to be aware of where it's running and switch the cert store used as necessary

All user certs only to StoreName.My StoreLocation.CurrentUser
All root certs should go to StoreName.Root StoreLocation.LocalMachine on Windows
All root certs should go to StoreName.Root StoreLocation.CurrentUser on *nix

Tcp_ClientCredentialTypeTests.TcpClientCredentialType_Certificate_EchoString needs
to be modified as well to reflect this change

Fixes dotnet#434
iamjasonp added a commit to iamjasonp/wcf that referenced this issue Oct 30, 2015
…ager

In Windows, we read/write our certificates from/to the LocalMachine store.
On *nix, however, we only have access to the User store. The BridgeClient needs
to be aware of where it's running and switch the cert store used as necessary

All user certs only to StoreName.My StoreLocation.CurrentUser
All root certs should go to StoreName.Root StoreLocation.LocalMachine on Windows
All root certs should go to StoreName.Root StoreLocation.CurrentUser on *nix

Tcp_ClientCredentialTypeTests.TcpClientCredentialType_Certificate_EchoString needs
to be modified as well to reflect this change

Fixes dotnet#434
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
test bug Test issues that need fixing.
Projects
None yet
Development

No branches or pull requests

3 participants