SystemTrustCertificateWithCustomRootTrust failure in CI

[jakobbotsch]

Example console log: https://helixr18s23ayyeko0k025g8.blob.core.windows.net/dotnet-runtime-refs-pull-123814-merge-842f5f0e87314049be/System.Security.Cryptography.Tests/1/console.5c9e8028.log?helixlogtype=result

  System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust(addCertificateToCustomRootTrust: True) [FAIL]
      Assert.Equal() Failure: Values differ
      Expected: 3
      Actual:   2
      Stack Trace:
        /_/src/libraries/System.Security.Cryptography/tests/X509Certificates/ChainTests.cs(293,0): at System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust(Boolean addCertificateToCustomRootTrust)
           at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
           at System.RuntimeMethodHandle.InvokeMethod(ObjectHandleOnStack target, Void** arguments, ObjectHandleOnStack sig, BOOL isConstructor, ObjectHandleOnStack result)
        /_/src/coreclr/System.Private.CoreLib/src/System/Reflection/MethodBaseInvoker.CoreCLR.cs(36,0): at System.Reflection.MethodBaseInvoker.InterpretedInvoke_Method(Object obj, IntPtr* args)
        /_/src/libraries/System.Private.CoreLib/src/System/Reflection/MethodBaseInvoker.cs(174,0): at System.Reflection.MethodBaseInvoker.InvokeDirectByRefWithFewArgs(Object obj, Span`1 copyOfArgs, BindingFlags invokeAttr)
    System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust(addCertificateToCustomRootTrust: False) [FAIL]
      Assert.Equal() Failure: Values differ
      Expected: 3
      Actual:   2
      Stack Trace:
        /_/src/libraries/System.Security.Cryptography/tests/X509Certificates/ChainTests.cs(293,0): at System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust(Boolean addCertificateToCustomRootTrust)
           at InvokeStub_ChainTests.SystemTrustCertificateWithCustomRootTrust(Object, Span`1)
        /_/src/libraries/System.Private.CoreLib/src/System/Reflection/MethodBaseInvoker.cs(95,0): at System.Reflection.MethodBaseInvoker.InvokeWithOneArg(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

Build Information

Build: https://dev.azure.com/dnceng-public/cbb18261-c48f-4abb-8651-8cdcb5474649/_build/results?buildId=1274036
Build error leg or test failing: System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust
Pull request: https://github.com/dotnet/runtime.git/pull/123814

Error Message

Fill the error message using step by step known issues guidance.

{
  "ErrorMessage": "System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust(addCertificateToCustomRootTrust: True) [FAIL]",
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1274036
Error message validated: [System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust(addCertificateToCustomRootTrust: True) [FAIL]]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 1/31/2026 6:48:10 PM UTC

Report

Build	Definition	Test	Pull Request
1274036	dotnet/runtime	System.Security.Cryptography.X509Certificates.Tests.ChainTests.SystemTrustCertificateWithCustomRootTrust	#123814

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
0	1	1

[dotnet-policy-service]

Tagging subscribers to this area: @bartonjs, @vcsjones, @dotnet/area-system-security
See info in area-owners.md if you want to be subscribed.

[MihuBot]

I'm a bot. Here is a possible related and/or duplicate issue (I may be wrong):

• SystemTrustCertificateWithCustomRootTrust fails on macOS 26 #118646