ラベル: area-System.Net.Security の Pull Request の一覧を表示します。上から新しい順に表示されています。
- #135928 [Android] Avoid eager trust-anchor enumeration in certificate-chain builds
- #136139 Fix AcceptWithDefaultValidation_CertificateContextTrust_HonorsChainPolicy test failures
- #135749 Update MsQuic to version 2.5.12
- #136022 Queue RevocationResponder work items to the global thread pool queue
- #135700 Fix TlsSession's ClientHello peek failure message
- #135780 [release/11.0] Remove unused client certificate from TLS host resumption test
- #135751 Disable parallelisation on SslStreamTlsResumeTests
- #135746 Add post-handshake auth tests for TlsSession
- #135633 [release/10.0] Remove unused client certificate from TLS host resumption test
- #135514 Reduce Kerberos fuzzer duplication
- #133606 Populate RemoteIdentity SID claims from the Kerberos PAC on Unix
- #135337 Fix cached Windows TLS credential lifetime race
- #135351 Format net_ssl_io_cert_validation in TlsSession reject path
- #134921 Fix SslStream handling of empty TLS handshake records
- #135083 Isolate SslStream certificate validation tests from TLS resumption
- #135049 Return Complete from RequestClientCertificate when the client didn't offer post-handshake auth
- #134641 Fix PHA-not-offered check in NegotiateClientCertificateAsync on OpenSSL 1.1
- #133174 Skip peer certificate revalidation on resumed TLS sessions by default
- #134570 Preserve peer certificate chain in TlsSession
- #134585 Disable implicit AIA fetching for Schannel credentials
- #134313 Pool TLS 1.3 session tickets per host instead of keeping one
- #134422 Remove unused client certificate from TLS host resumption test
- #133875 Use private PKI for untrusted TLS session certificate test
- #133605 [release/11.0] Fix post-handshake authentication in TlsSession API
- #133159 Add more test coverage for TlsSession APIs
- #133404 Exclude desktop certificate context test from mobile builds
- #133361 Limit the size of SNI parsed from ClientHello
- #132760 [release/10.0] Fix X509 reference leak in SslStream extra chain certificates on Unix
- #133021 Handle StreamBuffer disposal race in SslStream test
- #132733 [release/11.0] Fix X509 reference leak in SslStream extra chain certificates on Unix
- #132748 Update exception handling in SslStreamDisposeTest
- #132749 Fix TlsSessionTests TLS resume flakiness by using a unique SNI
- #132694 Fix SslStream detection of exactly-5-byte TLS frames
- #132703 Remove commented ActiveIssue from SslKeyLogFile test
- #132277 Compile UpdateOptions_ServerCertificateContextProvided test on desktop only
- #132210 Add SslStream legacy path compatibility switch
- #132079 Fix SslStream client certificate credential caching
- #131457 TlsContext/TlsSession: document lifetime, tighten AttachSocket
- #131943 Improve TlsSession error diagnostics
- #131857 Keep accepted sockets alive in TlsSession tests
- #131588 Enforce required Negotiate mutual authentication
- #131755 Disable TLS resume in SslStreamServer_RejectsClientCert_ClientObservesAlert
- #131758 Fix SslAuthenticationOptions incorrectly disposing unowned IntermediateCertificates
- #131759 Accept moving write buffers for socket-bound TLS sessions
- #131757 [release/10.0] Fix flaky MalformedPacketsDuringHandshake test
- #131425 Update SetCredentialsAttributesW to match the native C API declaration
- #131195 Fall back to NTLM in managed SPNEGO when Kerberos credentials are missing on Unix
- #131191 [release/11.0-preview7] Throw PNSE for Extended Protection on unsupported platforms
- #130366 Add low-level TLS state machine API (TlsContext / TlsSession)
- #130758 Implement channel binding support on Unix
- #131149 [release/9.0-staging] Fix flaky MalformedPacketsDuringHandshake test
- #131148 [release/8.0-staging] Fix flaky MalformedPacketsDuringHandshake test
- #131144 Throw PNSE for Extended Protection on unsupported platforms
- #130756 Improve malformed TLS handshake frame detection
- #124173 [Android] Respect platform trust manager in SslStream
- #129468 Use managed NTLM on RHEL 8 to fix NegotiateAuthentication test failures
- #129579 Fix debug build of libraries tests
- #129479 Port System.Net.Security to OpenBSD
- #128316 Generate TLS alerts on certificate validation failure on macOS
- #128942 Don't throw in NegotiateClientCertificateAsync if Post-Handshake auth wasn't enabled.
- #126623 Fix NegotiateAuthentication to surface TargetUnknown status for unknown SPNs
- #128978 Map SEC_E_MUTUAL_AUTH_FAILED SSPI status
- #128245 Linux SslStream: custom BIO_METHOD over managed buffer windows
- #128692 Validate sizes and offsets when parsing NTLM challenge
- #128691 Validate base64 in NegotiateAuthentication.GetOutgoingBlob(string)
- #128325 Fix GCHandle leak in OSX SafeDeleteSslContext
- #128284 Release Android X509 chain certificate GREFs
- #128067 Fix NegotiateStream stale read buffer on mid-frame read failure
- #128244 improve accuracy of SslClientHelloInfo
- #128220 Sync TlsFrameHelper.cs typo/grammar fixes from dotnet/yarp
- #127451 Handle missing Network.framework peer certificate chain
- #126279 fix import of SPN with Kerberos realm
- #115996 Support certificate validation TLS alerts for Linux
- #126647 Remove stderr logging in GSSAPI initialization
- #126693 Work around Schannel TLS resume disable race on older Windows
- #126352 Fix bounds check bugs in TlsFrameHelper and harden SslStream server handshake
- #125324 improve error handling in OpenSSL init code
- #125039 Fix missing big-endian conversions for multi-byte NTLM wire fields
- #124584 [release/10.0] Fix certificate disposal in RemoteCertificateValidationCallback causing NRE on reuse
- #125049 Disable AIA certificate downloads for server client-cert validation by default
- #125201 Fix NTLM ProcessTargetInfo returning wrong buffer slice when skipping entries
- #124631 Remove Debug.Assert in SetSslCertificate that aborts process during dispose-during-handshake race
- #124590 Fix ALPN protocol list size field type and add boundary tests
- #124598 Fix ManagedNtlm on big-endian architectures
- #124542 Revert "Re-enable SslStreamTlsResumeTests.ClientDisableTlsResume_Succeeds"
- #124463 Re-enable SslStreamTlsResumeTests.ClientDisableTlsResume_Succeeds
- #123987 Fix handling of errSSLClosedGraceful from SSLWrite on macOS
- #123875 Fix certificate disposal in RemoteCertificateValidationCallback causing NRE on reuse
- #123906 Use SequenceEqual instead of SequenceCompareTo in SslStreamPal.SelectApplicationProtocol
- #123905 Stackalloc cert handles in SafeDeleteSslContext.SetCertificate on macOS
- #123904 Avoid array allocations in GetRequestCertificateAuthorities
- #123528 Update native AOT ActiveIssue on NegotiateAuthenticationTests
- #123473 Disable NTLM tests failing in native AOT outerloops
- #123239 Fix for TLS 1.3 session resumption on Linux
- #123055 fix ntlm tests on platforms with broken gssapi
- #123003 Fix detection of System.Net.Security.Native