[Bug 258709] lang/mono6.8: cert-sync doesn't work on iocage style base jails

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 19 Oct 2021 12:29:17 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258709

--- Comment #7 from Misso Works <missoline@protonmail.com> ---
I have just built mono with these changes and while they fix the issue with
cert-sync, the CERTIFICATE_VERIFY_FAIL exception still is there, maybe an
additional patch needs to be included:

csharp> var wc = new System.Net.WebClient();
csharp> wc.DownloadString("https://letsencrypt.org")                           
                                                                               
                  System.Net.WebException: Error: TrustFailure (Authentication
failed, see inner exception.) --->
System.Security.Authentication.AuthenticationException: Authentication failed,
see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL
routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED                            
                         at
/usr/local/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
                                                                             
at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in
<6e75d52b61f74f63805d7d058bef4ea1>:0                                           
                                    at
Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake
(Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate)
[0x000da] in <6e75d52b61f74f63805d7d058bef4ea1>:0                              
                                                                               
                                                        at (wrapper
remoting-invoke-with-check)
Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
                                at Mono.Net.Security.AsyncHandshakeRequest.Run
(Mono.Net.Security.AsyncOperationStatus status) [0x00006] in
<6e75d52b61f74f63805d7d058bef4ea1>:0                                
  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation
(System.Threading.CancellationToken cancellationToken) [0x000fc] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
   --- End of inner exception stack trace ---
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication
(System.Boolean runSynchronously,
Mono.Net.Security.MonoSslAuthenticationOptions options,
System.Threading.CancellationToken cancellationToken) [0x00262] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream
(System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken
cancellationToken) [0x0016a] in <6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation,
System.Boolean reused, System.Threading.CancellationToken cancellationToken)
[0x001ba] in <6e75d52b61f74f63805d7d058bef4ea1>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation,
System.Boolean reused, System.Threading.CancellationToken cancellationToken)
[0x0021a] in <6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebConnection.InitConnection (System.Net.WebOperation
operation, System.Threading.CancellationToken cancellationToken) [0x00141] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebOperation.Run () [0x0009a] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T]
(System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout,
System.Action abort, System.Func`1[TResult] aborted,
System.Threading.CancellationTokenSource cts) [0x000f8] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.HttpWebRequest.GetResponse () [0x00016] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebClient.GetWebResponse (System.Net.WebRequest request)
[0x00000] in <6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebClient.DownloadBits (System.Net.WebRequest request,
System.IO.Stream writeStream) [0x000e6] in <6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebClient.DownloadDataInternal (System.Uri address,
System.Net.WebRequest& request) [0x00061] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00011] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at System.Net.WebClient.DownloadString (System.String address) [0x00008] in
<6e75d52b61f74f63805d7d058bef4ea1>:0 
  at (wrapper remoting-invoke-with-check)
System.Net.WebClient.DownloadString(string)
  at <InteractiveExpressionClass>.Host (System.Object& $retval) [0x00000] in
<25d4ed1848e74873a46a27201620fdc9>:0 
  at Mono.CSharp.Evaluator.Evaluate (System.String input, System.Object&
result, System.Boolean& result_set) [0x00038] in
<50208ddc2c9e4fcea9d1930b33f7702a>:0 
  at Mono.CSharpShell.Evaluate (System.String input) [0x00000] in
<c8753e93298d4958b29320a00cdcfd88>:0

-- 
You are receiving this mail because:
You are the assignee for the bug.