[ci-scan] Test failure: System.Net.Security.Tests.SslStreamTls12NetworkConformanceTests.ReadAsync_ContinuesOnCurrentSynchronizationContextIfDesired

[lewing]

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1619748
Build error leg or test failing: build_linux_x64_Debug_Mono_Interpreter_LibrariesTests-System.Net.Security.Tests
Pull request: #134618

KBE authoring guidance (ci-failure-scan)

• Error Details is for readers. Paste the full exception, stack trace, or build error excerpt so the failure is understandable without opening the raw log.
• Build Analysis parses only the single JSON block under Error Message.
• ErrorMessage is a case-sensitive ordinal String.Contains substring copied verbatim from the failing log.
• Set BuildRetry to true only for a clear infrastructure retry case. ExcludeConsoleLog disables Helix console-log scanning.

One case of the theory failed during the TLS handshake on linux-x64 Debug with the Mono interpreter (Helix job e2f92b64-6f5b-4da3-83db-315490f3d09f, work item System.Net.Security.Tests): 5081 total, 1 failed. The certificate validation callback rejected the remote certificate. The PR build that hit this doesn't touch System.Net.Security or Mono, and the test didn't fail in the main runtime build 1619318.

Existing KBE #133418 covers other SslStream failures (TLS resume and IncorrectServerName) that appeared in the same build on windows-x86. It doesn't match this failure because its ErrorMessage doesn't appear in this work item's log.

Error Details

System.Net.Security.Tests.SslStreamTls12NetworkConformanceTests.ReadAsync_ContinuesOnCurrentSynchronizationContextIfDesired(flowExecutionContext: True, continueOnCapturedContext: True) [FAIL]
  System.Security.Authentication.AuthenticationException : The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
  Stack Trace:
    /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStream.IO.cs(700,0): at System.Net.Security.SslStream.CreateCertificateValidationException(SslAuthenticationOptions options, SslPolicyErrors sslPolicyErrors, X509ChainStatusFlags chainStatus)
    /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStream.IO.cs(691,0): at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
    /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStream.IO.cs(420,0): at System.Net.Security.SslStream.<ForceAuthenticationAsync>d__159`1[[System.AsyncReadWriteAdapter, System.Net.Security, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a]].MoveNext()
    ...
    /_/src/libraries/System.Net.Security/src/System/Net/Security/SslStream.IO.cs(552,0): at System.Net.Security.SslStream.<ReceiveHandshakeFrameAsync>d__160`1[[System.AsyncReadWriteAdapter, System.Net.Security, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a]].MoveNext()

Error Message

{
  "ErrorMessage": [
    "SslStreamTls12NetworkConformanceTests.ReadAsync_ContinuesOnCurrentSynchronizationContextIfDesired",
    "System.Security.Authentication.AuthenticationException : The remote certificate was rejected by the provided RemoteCertificateValidationCallback."
  ],
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Agentic workflow metadata (ci-failure-scan)

Workflow artifact: ci-failure-scan
Artifact kind: kbe-verification
Verified match count: 1 hits in failure.log

Note

This issue was drafted with GitHub Copilot.

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1619748
Error message validated: [SslStreamTls12NetworkConformanceTests.ReadAsync_ContinuesOnCurrentSynchronizationContextIfDesired System.Security.Authentication.AuthenticationException : The remote certificate was rejected by the provided RemoteCertificateValidationCallback.]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 10/1/2026 6:43:48 PM UTC

Report

Build	Repository	Test	Pull Request
1619748	dotnet/runtime	System.Net.Security.Tests.SslStreamTls12NetworkConformanceTests.ReadAsync_ContinuesOnCurrentSynchronizationContextIfDesired	#134618

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
0	1	1

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/ncl, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.