dotnet / dotnet/runtime

ConnectWithRevocation_WithCallback fails with RevocationStatusUnknown

Open
#132,950 2 comments 0 reactions 0 assignees View on GitHub
area-System.Net.Security blocking-clean-ci Known Build Error
Dominant language
C#
Stars
18.3k
Forks
5.6k
PR merge metrics
PR metrics pending

Description

```
[FAIL] System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback(checkRevocation: True)
Assert.Contains() Failure: Item not found in collection
Collection: [RevocationStatusUnknown]
Not found: Revoked
at System.Net.Security.Tests.CertificateValidationRemoteServer.g__CertificateValidationCallback|6_0(Object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors) in /_/src/libraries/System.Net.Security/tests/FunctionalTests/CertificateValidationRemoteServer.cs:line 370
at System.Net.Security.SslStream.VerifyRemoteCertificateCore(Object, SslAuthenticationOptions, SafeDeleteContext, X509Certificate2&, SslConnectionInfo&, X509Certificate2, X509Chain, SslCertificateTrust, ProtocolToken&, SslPolicyErrors&, X509ChainStatusFlags&) in /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStream.Protocol.cs:line 1306
```

## Build Information
Build: https://dev.azure.com/dnceng-public/cbb18261-c48f-4abb-8651-8cdcb5474649/_build/results?buildId=1574043
Build error leg or test failing: System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback
Pull request: https://github.com/dotnet/runtime/pull/132933

## Error Message

**DO NOT USE JSON BELOW IF THIS IS A BUILD BREAK** otherwise build analysis will allow pull requests to merge that break the build worse. For a build break, do not use this issue form. Make a regular new issue.

Fill the error message using [step by step known issues guidance](https://github.com/dotnet/arcade/blob/main/Documentation/Build%20Analysis/KnownIssueJsonStepByStep.md).

```json
{
"ErrorMessage": "",
"ErrorPattern": "(FAIL.*ConnectWithRevocation_WithCallback|ConnectWithRevocation_WithCallback.*FAIL).*RevocationStatusUnknown",
"BuildRetry": false,
"ExcludeConsoleLog": false
}
```

Collection: [RevocationStatusUnknown]

### Known issue validation
**Build: :mag_right:** https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043
**Error message validated:** `[[FAIL] System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback RevocationStatusUnknown`]
**Result validation:** :white_check_mark: Known issue matched with the provided build.
**Validation performed at:** 8/30/2026 2:46:41 PM UTC

### Report

|Build|Repository|Test|Pull Request|
|---|---|---|---|
|[1574043](https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043)|dotnet/runtime|[System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback](https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043&view=ms.vss-test-web.build-test-results-tab&runId=43374476&resultId=181223)|dotnet/runtime#132933|
#### Summary
|24-Hour Hit Count|7-Day Hit Count|1-Month Count|
|---|---|---|
|0|0|1|

### Known issue validation
**Build: :mag_right:**
**Result validation:** :warning: Provided build not found. Provide a valid build in the "**Build:** :mag_right:" line.
**Validation performed at:** 9/9/2026 5:33:34 PM UTC

### Report

|Build|Repository|Test|Pull Request|
|---|---|---|---|
|[1574043](https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043)|dotnet/runtime|[System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback](https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043&view=ms.vss-test-web.build-test-results-tab&runId=43374476&resultId=181223)|dotnet/runtime#132933|
#### Summary
|24-Hour Hit Count|7-Day Hit Count|1-Month Count|
|---|---|---|
|0|0|1|

### Report

|Build|Repository|Test|Pull Request|
|---|---|---|---|
|[1574043](https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043)|dotnet/runtime|[System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback](https://dev.azure.com/dnceng-public/public/_build/results?buildId=1574043&view=ms.vss-test-web.build-test-results-tab&runId=43374476&resultId=181223)|dotnet/runtime#132933|
#### Summary
|24-Hour Hit Count|7-Day Hit Count|1-Month Count|
|---|---|---|
|0|0|1|

Contributor guide

Open the contributing guide

Research direction

Start with System.Net.Security.Tests.CertificateValidationRemoteServer.ConnectWithRevocation_WithCallback and the failure at CertificateValidationRemoteServer.cs:370. Run the named test and inspect the SslStream stack location in SslStream.Protocol.cs:1306, along with pull request #132933. Done means the test reliably observes the expected Revoked status instead of RevocationStatusUnknown.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
security, testing-qa
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.