Skip to content

Commit a1d5e43

Browse files
authored
Disable BuildChainForCertificateSignedWithDisallowedKey on Linux again
1 parent fce2e6a commit a1d5e43

File tree

1 file changed

+2
-2
lines changed
  • src/libraries/System.Security.Cryptography/tests/X509Certificates

1 file changed

+2
-2
lines changed

src/libraries/System.Security.Cryptography/tests/X509Certificates/ChainTests.cs

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1112,6 +1112,7 @@ public static void BuildChainForFraudulentCertificate()
11121112
}
11131113

11141114
[Fact]
1115+
[SkipOnPlatform(TestPlatforms.Linux, "Not supported on Linux.")]
11151116
public static void BuildChainForCertificateSignedWithDisallowedKey()
11161117
{
11171118
// The intermediate certificate is from the now defunct CA DigiNotar.
@@ -1177,12 +1178,11 @@ public static void BuildChainForCertificateSignedWithDisallowedKey()
11771178
chain.ChainPolicy.ExtraStore.Add(intermediateCert);
11781179
Assert.False(chain.Build(cert));
11791180

1180-
if (PlatformDetection.IsAndroid || PlatformDetection.IsApplePlatform26OrLater || PlatformDetection.IsLinux)
1181+
if (PlatformDetection.IsAndroid || PlatformDetection.IsApplePlatform26OrLater)
11811182
{
11821183
// Android always validates trust as part of building a path,
11831184
// so violations comes back as PartialChain with no elements
11841185
// Apple 26 no longer block these SKIs since the roots are no longer trusted at all and are expired.
1185-
// Linux has no concept of a blocked key list, they just remove certificates from a trust store.
11861186
Assert.Equal(X509ChainStatusFlags.PartialChain, chain.AllStatusFlags());
11871187
}
11881188
else

0 commit comments

Comments
 (0)