Ignore the DuplicateExtension status from macOS 12. (#58889)
authorgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Fri, 10 Sep 2021 04:01:15 +0000 (22:01 -0600)
committerGitHub <noreply@github.com>
Fri, 10 Sep 2021 04:01:15 +0000 (22:01 -0600)
MacOS 12 introduces a new X.509 chain status, DuplicateExtension. As we do not report this in Windows and nor do we have a flag to map it to, we ignore it from macOS.

Co-authored-by: Kevin Jones <kevin@vcsjones.com>
src/libraries/Native/Unix/System.Security.Cryptography.Native.Apple/pal_x509chain.c

index ec12984..06f09cf 100644 (file)
@@ -195,7 +195,7 @@ static void MergeStatusCodes(CFTypeRef key, CFTypeRef value, void* context)
     }
     else if (CFEqual(keyString, CFSTR("NonEmptySubject")) || CFEqual(keyString, CFSTR("GrayListedKey")) ||
              CFEqual(keyString, CFSTR("CTRequired")) || CFEqual(keyString, CFSTR("GrayListedLeaf")) ||
-             CFEqual(keyString, CFSTR("IdLinkage")))
+             CFEqual(keyString, CFSTR("IdLinkage")) || CFEqual(keyString, CFSTR("DuplicateExtension")))
     {
         // Not a "problem" that we report.
     }