[Mono-bugs] [Bug 69805][Nor] Changed - SslClientStream - Server Certificate Validation

[bugzilla-daemon@bugzilla.ximian.com]

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by sebastien@ximian.com.

http://bugzilla.ximian.com/show_bug.cgi?id=69805

--- shadow/69805	2004-11-26 13:36:16.000000000 -0500
+++ shadow/69805.tmp.29612	2004-11-26 16:47:53.000000000 -0500
@@ -228,6 +228,24 @@
 
   https://www.swreg.org:
    Error #0: unknown (try WinError.h)
    FAILED: #-2146232800
 
 
+
+------- Additional Comments From sebastien@ximian.com  2004-11-26 16:47 -------
+Under Windows using --web with tlstest doesn't use Mono.Security.dll
+(it use MS WebRequest which use the OS SSL support). So only the
+--stream is revelent under Windows.
+
+Now the only way to get an Error #0 is if an exception is thrown when
+building the certificate chain (see TlsServerCertificate.cs in
+/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake.Client).
+As I do not have this exception this means we're not building the same
+chain.
+
+This is possible if you have some "bad" files in your certificate
+store. A good way to be sure is to put a breakpoint in the
+validateCertificates method and step into the chain building process.
+
+If you don't have a debugger then remove the "try/catch" clause around
+ line 228. The exception thrown should give us some clues.