Skip to content

fix: Kestrel Http3 LoadDevelopmentCertificateViaConfiguration test stabilization #65249

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
DeagleGross wants to merge 2 commits into from
+62 −51
Closed

fix: Kestrel Http3 LoadDevelopmentCertificateViaConfiguration test stabilization #65249

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d3ce0a3
stabilize test
DeagleGross Jan 28, 2026
237dce3
Update src/Servers/Kestrel/test/Interop.FunctionalTests/Http3/Http3Tl…
DeagleGross Jan 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
113 changes: 62 additions & 51 deletions src/Servers/Kestrel/test/Interop.FunctionalTests/Http3/Http3TlsTests.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -438,74 +438,85 @@ public void UseKestrelCore_ConfigurationBased(bool useQuic)
[MsQuicSupported]
public async Task LoadDevelopmentCertificateViaConfiguration()
{
var expectedCertificate = new X509Certificate2(TestResources.GetCertPath("aspnetdevcert.pfx"), "testPassword", X509KeyStorageFlags.Exportable);
var bytes = expectedCertificate.Export(X509ContentType.Pkcs12, "1234");
var path = GetCertificatePath();
Directory.CreateDirectory(Path.GetDirectoryName(path));
File.WriteAllBytes(path, bytes);

var config = new ConfigurationBuilder().AddInMemoryCollection(new[]
try
{
new KeyValuePair<string, string>("Certificates:Development:Password", "1234"),
}).Build();
using var expectedCertificate = new X509Certificate2(TestResources.GetCertPath("aspnetdevcert.pfx"), "testPassword", X509KeyStorageFlags.Exportable);
var bytes = expectedCertificate.Export(X509ContentType.Pkcs12, "1234");
Directory.CreateDirectory(Path.GetDirectoryName(path));
File.WriteAllBytes(path, bytes);

var ranConfigureKestrelAction = false;
var ranUseHttpsAction = false;
var hostBuilder = CreateHostBuilder(async context =>
{
await context.Response.WriteAsync("Hello World");
}, configureKestrel: kestrelOptions =>
{
ranConfigureKestrelAction = true;
kestrelOptions.Configure(config);
var config = new ConfigurationBuilder().AddInMemoryCollection(new[]
{
new KeyValuePair<string, string>("Certificates:Development:Password", "1234"),
}).Build();

kestrelOptions.ListenAnyIP(0, listenOptions =>
var ranConfigureKestrelAction = false;
var ranUseHttpsAction = false;
var hostBuilder = CreateHostBuilder(async context =>
{
listenOptions.Protocols = HttpProtocols.Http3;
listenOptions.UseHttps(_ =>
await context.Response.WriteAsync("Hello World");
}, configureKestrel: kestrelOptions =>
{
ranConfigureKestrelAction = true;
kestrelOptions.Configure(config);

kestrelOptions.ListenAnyIP(0, listenOptions =>
{
ranUseHttpsAction = true;
listenOptions.Protocols = HttpProtocols.Http3;
listenOptions.UseHttps(_ =>
{
ranUseHttpsAction = true;
});
});
});
});

Assert.False(ranConfigureKestrelAction);
Assert.False(ranUseHttpsAction);
Assert.False(ranConfigureKestrelAction);
Assert.False(ranUseHttpsAction);

using var host = hostBuilder.Build();
await host.StartAsync().DefaultTimeout();
using var host = hostBuilder.Build();
await host.StartAsync().DefaultTimeout();

Assert.True(ranConfigureKestrelAction);
Assert.True(ranUseHttpsAction);
Assert.True(ranConfigureKestrelAction);
Assert.True(ranUseHttpsAction);

var request = new HttpRequestMessage(HttpMethod.Get, $"https://127.0.0.1:{host.GetPort()}/");
request.Version = HttpVersion.Version30;
request.VersionPolicy = HttpVersionPolicy.RequestVersionExact;
request.Headers.Host = "testhost";
var request = new HttpRequestMessage(HttpMethod.Get, $"https://127.0.0.1:{host.GetPort()}/");
request.Version = HttpVersion.Version30;
request.VersionPolicy = HttpVersionPolicy.RequestVersionExact;
request.Headers.Host = "testhost";

var ranCertificateValidation = false;
var httpHandler = new SocketsHttpHandler();
httpHandler.SslOptions = new SslClientAuthenticationOptions
{
RemoteCertificateValidationCallback = (object _sender, X509Certificate actualCertificate, X509Chain _chain, SslPolicyErrors _sslPolicyErrors) =>
var ranCertificateValidation = false;
var httpHandler = new SocketsHttpHandler();
httpHandler.SslOptions = new SslClientAuthenticationOptions
{
ranCertificateValidation = true;
Assert.Equal(expectedCertificate.GetSerialNumberString(), actualCertificate.GetSerialNumberString());
return true;
},
TargetHost = "targethost",
};
using var client = new HttpMessageInvoker(httpHandler);

var response = await client.SendAsync(request, CancellationToken.None).DefaultTimeout();
response.EnsureSuccessStatusCode();
var result = await response.Content.ReadAsStringAsync();
Assert.Equal(HttpVersion.Version30, response.Version);
Assert.Equal("Hello World", result);
RemoteCertificateValidationCallback = (object _sender, X509Certificate actualCertificate, X509Chain _chain, SslPolicyErrors _sslPolicyErrors) =>
{
ranCertificateValidation = true;
Assert.Equal(expectedCertificate.GetSerialNumberString(), actualCertificate.GetSerialNumberString());
return true;
},
TargetHost = "targethost",
};
using var client = new HttpMessageInvoker(httpHandler);

var response = await client.SendAsync(request, CancellationToken.None).DefaultTimeout();
response.EnsureSuccessStatusCode();
var result = await response.Content.ReadAsStringAsync();
Assert.Equal(HttpVersion.Version30, response.Version);
Assert.Equal("Hello World", result);

Assert.True(ranCertificateValidation);
Assert.True(ranCertificateValidation);

await host.StopAsync().DefaultTimeout();
await host.StopAsync().DefaultTimeout();
}
finally
{
if (File.Exists(path))
{
File.Delete(path);
}
}
}

///<remarks>
Expand Down
Loading