Repository navigation
[ci-scan] Test failure: SocketsHttpHandler_HttpClientHandler_ServerCertificates_Test bad-certificate cases on Android CoreCLR #135988
Description
Build Information
Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1638654
Build error leg or test failing: android-arm / android-arm64 / android-x64 Release AllSubsets_CoreCLR_Smoke - System.Net.Http.Functional.Tests.SocketsHttpHandler_HttpClientHandler_ServerCertificates_Test
KBE authoring guidance (ci-failure-scan)
Error Detailsis for readers. Paste the full exception, stack trace, or build error excerpt so the failure is understandable without opening the raw log.- Build Analysis parses only the single JSON block under
Error Message. ErrorMessageis a case-sensitive ordinalString.Containssubstring copied verbatim from the failing log.- Set
BuildRetrytotrueonly for a clear infrastructure retry case.ExcludeConsoleLogdisables Helix console-log scanning.
Error Details
UseCallback_BadCertificate_ExpectedPolicyErrors and NoCallback_BadCertificate_ThrowsException fail on all three Android CoreCLR smoke legs (arm, arm64, x64) on every runtime build of main since at least 2026-10-15 (builds 1636584, 1637356, 1637932, 1638654) and on PRs such as #135413. For the expired-certificate cases the client-side validation callback reports None instead of RemoteCertificateChainErrors, or the handshake fails with an EOF; without a callback the request times out instead of throwing HttpRequestException.
[FAIL] System.Net.Http.Functional.Tests.SocketsHttpHandler_HttpClientHandler_ServerCertificates_Test.UseCallback_BadCertificate_ExpectedPolicyErrors(expired: True, wrongHostName: False, expectedErrors: RemoteCertificateChainErrors)
System.AggregateException : One or more errors occurred. (The SSL connection could not be established, see inner exception.) (Received an unexpected EOF or 0 bytes from the transport stream.)
---- System.Net.Http.HttpRequestException : The SSL connection could not be established, see inner exception.
-------- System.Security.Authentication.AuthenticationException : Authentication failed, see inner exception.
------------ Assert.Equal() Failure: Values differ
Expected: RemoteCertificateChainErrors
Actual: None
---- System.IO.IOException : Received an unexpected EOF or 0 bytes from the transport stream.
at System.Threading.Tasks.TaskTimeoutExtensions.WhenAllOrAnyFailed(Task[] tasks)
at System.Net.Test.Common.LoopbackServerFactory.<>c__DisplayClass6_0.<<CreateClientAndServerAsync>b__0>d.MoveNext()
[FAIL] System.Net.Http.Functional.Tests.SocketsHttpHandler_HttpClientHandler_ServerCertificates_Test.NoCallback_BadCertificate_ThrowsException(expired: True, wrongHostName: False)
Assert.Throws() Failure: Exception type was not an exact match
Expected: typeof(System.Net.Http.HttpRequestException)
Actual: typeof(System.Threading.Tasks.TaskCanceledException)
---- System.Threading.Tasks.TaskCanceledException : The request was canceled due to the configured HttpClient.Timeout of 100 seconds elapsing.
Error Message
{
"ErrorMessage": [
"[FAIL] System.Net.Http.Functional.Tests.SocketsHttpHandler_HttpClientHandler_ServerCertificates_Test.",
"The SSL connection could not be established, see inner exception."
],
"ErrorPattern": "",
"BuildRetry": false,
"ExcludeConsoleLog": false
}Agentic workflow metadata (ci-failure-scan)
Workflow artifact: ci-failure-scan
Artifact kind: kbe-verification
Verified match count: 3 hits in failure.log
Note
This issue was drafted with GitHub Copilot.
Known issue validation
Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1638654
Error message validated: [[FAIL] System.Net.Http.Functional.Tests.SocketsHttpHandler_HttpClientHandler_ServerCertificates_Test. The SSL connection could not be established, see inner exception.]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 10/16/2026 11:45:49 PM UTC
Report
Summary
| 24-Hour Hit Count | 7-Day Hit Count | 1-Month Count |
|---|---|---|
| 42 | 44 | 44 |
Activity
dotnet-policy-service commentedon Oct 16, 2026
Tagging subscribers to this area: @dotnet/ncl, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.
MihaZupan commentedon Oct 17, 2026
I think this was also fixed by #135975