starred/WireMock.Net-wiremock
1
0
Fork 0
mirror of https://github.com/wiremock/WireMock.Net.git synced 2026-08-12 15:02:13 +02:00
Code Issues 32 Packages Projects Releases 10 Wiki Activity

Client certificate authentication works with .NET 8 and fails with .NET 9 #720

New Issue
Open
opened 2025-12-29 15:31:51 +01:00 by adam · 3 comments
adam commented 2025-12-29 15:31:51 +01:00
Owner
Copy Link
Copy Source

Originally created by @drauch on GitHub (Oct 12, 2025).

Describe the bug

I'm using the following server settings:

    _mockSignPathApi = WireMockServer.Start(
        new WireMockServerSettings
        {
          Port = 8888,
          ClientCertificateMode = ClientCertificateMode.AllowCertificate,
          AcceptAnyClientCertificate = true,
          UseSSL = true
        });

and use your own client_cert.pfx from your test suite as client certificate. In .NET 8 this set up works, in .NET 9 this fails (i.e, the request fails, I don't even come to the point where I could assert whether it's there).

Expected behavior:

It should work with .NET 9 too.

Other related info

Newest WireMock.NET version.

Originally created by @drauch on GitHub (Oct 12, 2025). ### Describe the bug I'm using the following server settings: ``` _mockSignPathApi = WireMockServer.Start( new WireMockServerSettings { Port = 8888, ClientCertificateMode = ClientCertificateMode.AllowCertificate, AcceptAnyClientCertificate = true, UseSSL = true }); ``` and use your own client_cert.pfx from your test suite as client certificate. In .NET 8 this set up works, in .NET 9 this fails (i.e, the request fails, I don't even come to the point where I could assert whether it's there). ### Expected behavior: It should work with .NET 9 too. ### Other related info Newest WireMock.NET version.
adam added the bug label 2025-12-29 15:31:51 +01:00
adam commented 2025-12-29 15:31:52 +01:00
Author
Owner
Copy Link
Copy Source

@drauch commented on GitHub (Oct 12, 2025):

Ah the culprit seems to be your client_cert.pfx (https://github.com/wiremock/WireMock.Net/blob/master/test/WireMock.Net.Tests/client_cert.pfx) in the test suite.

.NET 8:

  • new X509Certiifcate2(file, "1234") => X509Certificate2 incl. private key

.NET 9:

  • new X509Certiifcate2(file, "1234") => Access denied exception
  • X509CertificateLoader.LoadPkcs12FromFile(file, "1234") => X509Certificate2 without private key
@drauch commented on GitHub (Oct 12, 2025): Ah the culprit seems to be your client_cert.pfx (https://github.com/wiremock/WireMock.Net/blob/master/test/WireMock.Net.Tests/client_cert.pfx) in the test suite. .NET 8: * new X509Certiifcate2(file, "1234") => X509Certificate2 incl. private key .NET 9: * new X509Certiifcate2(file, "1234") => Access denied exception * X509CertificateLoader.LoadPkcs12FromFile(file, "1234") => X509Certificate2 without private key
adam commented 2025-12-29 15:31:52 +01:00
Author
Owner
Copy Link
Copy Source

@drauch commented on GitHub (Oct 12, 2025):

OK, by default it loads it with the flag EphemeralKeySet which doesn't work.
Using the flags Exportable | UserKeySet when loading with X509CertificateLoader fixes the problem.

May it help you when migrating the project to .NET9+ :-)

Best regards,
D.R.

@drauch commented on GitHub (Oct 12, 2025): OK, by default it loads it with the flag `EphemeralKeySet` which doesn't work. Using the flags `Exportable | UserKeySet` when loading with `X509CertificateLoader` fixes the problem. May it help you when migrating the project to .NET9+ :-) Best regards, D.R.
adam commented 2025-12-29 15:31:53 +01:00
Author
Owner
Copy Link
Copy Source

@StefH commented on GitHub (Oct 12, 2025):

@drauch
I keep this bug open as reminder.

@StefH commented on GitHub (Oct 12, 2025): @drauch I keep this bug open as reminder.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
bug
doc
doc
duplicate
feature
feature
invalid
pull-request
Mirrored from GitHub Pull Request
 question
wontfix
No labels bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/WireMock.Net-wiremock#720