Test failure System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildInvalidSignatureTwice(endEntityErrors: NotTimeValid | NotSignatureValid, intermediateErrors: NoError, rootErrors: UntrustedRoot)

[VincentBu]

Run: runtime-coreclr libraries-jitstressregs 20210321.1

Failed test:

net6.0-windows-Release-arm64-CoreCLR_checked-jitstressregs3-Windows.10.Arm64v8.Open
 -System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildInvalidSignatureTwice(endEntityErrors: NotTimeValid | NotSignatureValid, intermediateErrors: NoError, rootErrors: UntrustedRoot)

Error message:

Assert.Equal() Failure
Expected: NotTimeValid | NotSignatureValid | UntrustedRoot
Actual:   NotSignatureValid | UntrustedRoot


Stack trace
   at System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.<BuildInvalidSignatureTwice>g__CheckChain|7_2(<>c__DisplayClass7_0& , <>c__DisplayClass7_1& , <>c__DisplayClass7_2& ) in /_/src/libraries/System.Security.Cryptography.X509Certificates/tests/DynamicChainTests.cs:line 194
   at System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildInvalidSignatureTwice(X509ChainStatusFlags endEntityErrors, X509ChainStatusFlags intermediateErrors, X509ChainStatusFlags rootErrors) in /_/src/libraries/System.Security.Cryptography.X509Certificates/tests/DynamicChainTests.cs:line 211

[ghost]

Tagging subscribers to this area: @bartonjs, @vcsjones, @krwq, @GrabYourPitchforks
See info in area-owners.md if you want to be subscribed.

Issue Details

---

Run: runtime-coreclr libraries-jitstressregs 20210321.1

Failed test:

net6.0-windows-Release-arm64-CoreCLR_checked-jitstressregs3-Windows.10.Arm64v8.Open
 -System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildInvalidSignatureTwice(endEntityErrors: NotTimeValid | NotSignatureValid, intermediateErrors: NoError, rootErrors: UntrustedRoot)

Error message:

Assert.Equal() Failure
Expected: NotTimeValid | NotSignatureValid | UntrustedRoot
Actual:   NotSignatureValid | UntrustedRoot


Stack trace
   at System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.<BuildInvalidSignatureTwice>g__CheckChain|7_2(<>c__DisplayClass7_0& , <>c__DisplayClass7_1& , <>c__DisplayClass7_2& ) in /_/src/libraries/System.Security.Cryptography.X509Certificates/tests/DynamicChainTests.cs:line 194
   at System.Security.Cryptography.X509Certificates.Tests.DynamicChainTests.BuildInvalidSignatureTwice(X509ChainStatusFlags endEntityErrors, X509ChainStatusFlags intermediateErrors, X509ChainStatusFlags rootErrors) in /_/src/libraries/System.Security.Cryptography.X509Certificates/tests/DynamicChainTests.cs:line 211

Author:	VincentBu
Assignees:	-
Labels:	JitStress, arch-arm64, area-System.Security, os-windows
Milestone:	-

[vcsjones]

Looks like a dup of #48851.

Never mind, not a dupe. Two tests are named BuildInvalidSignatureTwice.

[vcsjones]

Hmm. My hypothesis is the chain builder is confused which intermediate it should be using since the test chain builder is not making certificate chains with unique names per-test. It may have been using the "wrong" intermediate, but since the test is expecting an invalid signature, worked most of the time anyway.

[bartonjs]

I don't see any failures for the DynamicChainTests version since #50048 got merged. So calling this one closed.