Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

dotnet / wcf Public

Notifications You must be signed in to change notification settings
Fork 573
Star 1.8k

Code
Issues 318
Pull requests 34
Actions
Projects
Wiki
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Wiki
Security and quality
Insights

MacOS Certificate Generator Fix#5941

Open

afifi-ins wants to merge 59 commits into

dotnet:maindotnet/wcf:mainfrom

afifi-ins:macos-cert-issueafifi-ins/wcf:macos-cert-issueCopy head branch name to clipboard

Conversation Commits59 (59)Checks Files changed

Open

MacOS Certificate Generator Fix#5941
afifi-ins wants to merge 59 commits into
dotnet:mainfrom
afifi-ins:macos-cert-issue

Commits

Commits on Jun 6, 2026

MacOS Certificate Generator Fix
afifi-ins
committed
Clean up macOS certificate store handling in CertificateGenerator

afifi-ins
and
Copilot
committed
Handle macOS certificate stores proactively

afifi-ins
and
Copilot
committed
Use custom keychain for all macOS cert operations

afifi-ins
and
Copilot
committed
Fix PKCS12 format for macOS compatibility

afifi-ins
and
Copilot
committed
Fix macOS PFX loading: bypass X509Certificate2 constructor, use CLI import

afifi-ins
and
Copilot
committed
Fix macOS: skip X509Certificate2 creation entirely for non-authority certs

afifi-ins
and
Copilot
committed
Fix NullReferenceException in InstallCertificateToMyStore on macOS

afifi-ins
and
Copilot
committed
Fix null server certificate on macOS: set default keychain and retrieve cert

afifi-ins
and
Copilot
committed
Fix macOS: use openssl to create compatible PFX instead of BouncyCastle

afifi-ins
and
Copilot
committed
Drop BouncyCastle, use .NET CertificateRequest API for cert generation

afifi-ins
and
Copilot
committed
Fix macOS keychain error and Linux notBefore validation in cert generation

afifi-ins
and
Copilot
committed
Restore PFX round-trip on Windows/Linux for key persistence

afifi-ins
and
Copilot
committed
Match original cert config: add MachineKeySet flag, set FriendlyName on Windows

afifi-ins
and
Copilot
committed
Suppress CA1416 for guarded FriendlyName setter

afifi-ins
and
Copilot
committed
macOS: route all store names to My in GetX509Store so installs and lookups converge

afifi-ins
and
Copilot
committed
macOS: always import PFX with private key when available

afifi-ins
and
Copilot
committed
macOS: relax CertificateFromSubject lookup to validOnly:false

afifi-ins
and
Copilot
committed
Skip Https_SecModeTransWithMessCred_UserNameClientCredential_Succeeds on macOS (issue #2870)

afifi-ins
and
Copilot
committed
Clean up unused cert helper code and diagnostic logging

afifi-ins
and
Copilot
committed
Update scripts to call CertificateGenerator from net10.0 output path

afifi-ins
and
Copilot
committed
Replace OID string constants with strongly-typed Oid fields

afifi-ins
and
Copilot
committed
Use built-in X509AuthorityKeyIdentifierExtension and SubjectAlternativeNameBuilder.AddUserPrincipalName

afifi-ins
and
Copilot
committed
Use CertificateRevocationListBuilder for CRL generation

afifi-ins
and
Copilot
committed
Simplify hex/serial helpers with built-in Convert + BigInteger APIs

afifi-ins
and
Copilot
committed
Use 'command -v' instead of 'which' in InstallRootCertificate.sh

afifi-ins
and
Copilot
committed
Fix CRL revocation entry serial encoding for high-bit serials

afifi-ins
and
Copilot
committed
Fix macOS cert install / partial-trust for issue #2870

afifi-ins
and
Copilot
committed
Issue #2870: fix macOS root cert partial trust with -p ssl

afifi-ins
and
Copilot
committed
macOS CI: default ServiceHost to localhost for cert install

afifi-ins
and
Copilot
committed
Fix invalid XML comment in SendToHelix.proj

afifi-ins
and
Copilot
committed
macOS Helix: pre-create login keychain for client cert install

afifi-ins
and
Copilot
committed
macOS Helix: delete existing login keychain before recreating

afifi-ins
and
Copilot
committed
macOS: install root cert trust into System.keychain admin domain via sudo

afifi-ins
and
Copilot
committed
Rerun CI

afifi-ins
and
Copilot
committed
Retrigger CI - macOS Helix queue was saturated previously

afifi-ins
and
Copilot
committed
Retrigger CI

afifi-ins
and
Copilot
committed
macOS: add trust diagnostics + temporarily skip Linux/Windows legs

afifi-ins
and
Copilot
committed
macOS: drop -p ssl trust policy + add .NET X509Chain diagnostic

afifi-ins
and
Copilot
committed
Use X509CertificateLoader to fix SYSLIB0057 (warnings-as-errors)

afifi-ins
and
Copilot
committed
macOS: skip custom-keychain root import; admin-trust System.keychain only

afifi-ins
and
Copilot
committed
macOS: add X509Chain leaf cert diagnostic

afifi-ins
and
Copilot
committed
Set RevocationMode=NoCheck on the 4 remaining macOS-failing tests

afifi-ins
and
Copilot
committed
Add missing using System.Security.Cryptography.X509Certificates in HttpsTests

afifi-ins
and
Copilot
committed
Test infra: add macOS System.keychain admin trust for remote server root cert

afifi-ins
and
Copilot
committed
Re-run CI after wcfcoresrv23 outage

afifi-ins
and
Copilot
committed
Drop CRL DP from generated leaf certs; revert per-test RevocationMode=NoCheck

afifi-ins
and
Copilot
committed
Revert leaf CRL DP drop; re-add RevocationMode=NoCheck on 4 macOS tests

afifi-ins
and
Copilot
committed
Revert RevocationMode=NoCheck; add macOS trust install diagnostics

afifi-ins
and
Copilot
committed
macOS: also seed .NET user-root store with wcfcoresrv23 root cert

afifi-ins
and
Copilot
committed
Fix MSBuild parse error in macOS pre-command: use backticks for cmd substitution

afifi-ins
and
Copilot
committed
macOS: drop dead user-root PFX seed; refresh trustd; remove -p ssl narrowing

afifi-ins
and
Copilot
committed
macOS: add AIA OCSP URL + tryLater OCSP responder for ChainTrust test

afifi-ins
and
Copilot
committed
macOS: replace tryLater OCSP stub with CA-signed BasicOCSPResponse

afifi-ins
and
Copilot
committed
PRService: re-mint server certs when PR changes cert source

afifi-ins
and
Copilot
committed
Accept OCSP requests with payload in URL path (RFC 6960 A.1.1)

afifi-ins
and
Copilot
committed
Return revoked status in OCSP response for revoked test certs

afifi-ins
and
Copilot
committed
Drop OCSP path; rely on CRL with trustd cache pre-warm on macOS

afifi-ins
and
Copilot
committed
Move CRL cache warming into CertificateHelper.ImportCertToMacOSKeychain

afifi-ins
and
Copilot
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.