Skip to content
This repository has been archived by the owner on Jan 23, 2023. It is now read-only.
/ corefx Public archive

Fix cryptography errors on macOS 10.13 #21631

Merged
merged 3 commits into from
Jun 27, 2017

Conversation

bartonjs
Copy link
Member

This provides a long-term workaround for the behavior change in CCCryptorReset for ECB transforms (should the workaround be inadequate we'd catch it in testing at a future point... but since ECB is stateless it's fine).

It provides a stable workaround for the appearance of a new status info field in the trust results. Unless "StatusCodes" became used to represent some new type of distinct error at a later date it seems ignorable.

The TestResetMethod chain test is being disabled because it's segfaulting. It appears to be the sole test testing DSA-based certificate chains, which might indicate a DSA-based regression in the new OS version. Investigation will continue.

bartonjs added 3 commits June 27, 2017 09:52
The test is causing a segfault to occur somewhere in the Security.framework
SecTrust code.  While that's being investigated, disable the test, so we can get
results from the rest of the tests.
@@ -165,6 +165,8 @@ public static void TestDispose()
}

[Fact]
// Crashing on macOS 10.13 Beta
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if we start doing this more, we can add a version detection method to PlatformDetectin.

@danmoseley
Copy link
Member

Will this fix the X509 issues, which have different symptoms? https://github.com/dotnet/corefx/issues/21436

Copy link
Contributor

@ianhays ianhays left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks again for describing these to me offline, LGTM.

@stephentoub stephentoub merged commit e48ef36 into dotnet:master Jun 27, 2017
@bartonjs bartonjs deleted the crypto_macos_10_13 branch July 5, 2017 22:22
@bartonjs bartonjs removed their assignment Aug 4, 2017
picenka21 pushed a commit to picenka21/runtime that referenced this pull request Feb 18, 2022
* Address kCCUnimplemented in CCCryptoReset for ECB

* Ignore new `StatusCodes` value in chain trust results.

* Disable X509Chain `TestResetMethod` test on macOS

The test is causing a segfault to occur somewhere in the Security.framework
SecTrust code.  While that's being investigated, disable the test, so we can get
results from the rest of the tests.


Commit migrated from dotnet/corefx@e48ef36
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants