Skip to content

Revisit and decide about SSLKEYLOG tests #116473

Description

@rokonec

OpenSSL 3.5.0 supports SSLKEYLOGFILE with just an environment variable, which is less strict than .NET's requirements. There's no way to check if this feature is enabled in the OpenSSL library, so we should disable the test based on the OpenSSL version for now.

As we are disabling SslStreamRemoteExecutorTestsOpenSSL for now.

Lets revisit it in future and either:

  • reenable it in particular versions, if OpenSLL decide to revert this
  • delete it if it seems that it will be stable behavior in OpenSSL, since it will make this test permanently disabled
  • change SSLKEYLOG implementation, for example we can consider to use our own env var as oppose to overloaded SSLKEYLOGFILE

Test disabled in #116474

Activity

  1. added this to the Future milestone on Jun 10, 2025
  2. dotnet-policy-service commented on Jun 10, 2025

    @dotnet-policy-service
    Contributor

    Tagging subscribers to this area: @dotnet/ncl, @bartonjs, @vcsjones
    See info in area-owners.md if you want to be subscribed.

  3. ManickaP commented on Jun 10, 2025

    @ManickaP
    Member

    Can we link the OpenSSL issue here as well?

  4. added
    disabled-testThe test is disabled in source code against the issue
    on Jun 10, 2025
  5. modified the milestones: Future, 11.0.0 on Aug 6, 2025
  6. modified the milestones: 11.0.0, 12.0.0 on Aug 4, 2026
  7. self-assigned this
    on Aug 24, 2026
  8. added theissue type on Aug 24, 2026
  9. locked and limited conversation to collaborators on Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions