Skip to content

Conversation

@wfurt
Copy link
Member

@wfurt wfurt commented Apr 3, 2022

This is related to dotnet/runtime#58927

It seems like the TLS 1.3 is failing because when we import, we pick old CAPI provider. This is generally bug in Schannel but we should be able to move on if we do something better. I don't fully understand what this is happening but the pox crreated according to @bartonjs instructions do work - I did ~ 800 runs without any issue.

before

Server certificate = CN=testservereku.contoso.com, HasPrivateKey True is X509Certificate2 True
  CNG wrapper or CNG key.
  Microsoft Enhanced Cryptographic Provider v1.0

now

Server certificate = CN=testservereku.contoso.com, HasPrivateKey True is X509Certificate2 True
  CNG wrapper or CNG key.
  Microsoft Software Key Storage Provider

@wfurt wfurt requested review from bartonjs and rzikm April 3, 2022 03:42
Copy link
Member

@rzikm rzikm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM if it looks good for Jeremy as well.

@wfurt wfurt merged commit c5e8abf into dotnet:main Apr 11, 2022
@wfurt wfurt deleted the provider branch April 11, 2022 21:20
@wfurt
Copy link
Member Author

wfurt commented Sep 27, 2023

/backport to release/6.0-staging

wfurt added a commit to wfurt/runtime-assets that referenced this pull request Sep 29, 2023
update pfx to pick better provider
ViktorHofer pushed a commit that referenced this pull request Oct 2, 2023
update pfx to pick better provider
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants