runtime: CreateXHarnessAppleWorkItems task failed unexpectedly when building iOS arm64 AllSubsets_Mono

Rolling Build failed this morning on the Build iOS arm64 Release AllSubsets_Mono job at the Send to Helix step, with a problem when trying to use the tool microsoft.dotnet.xharness.cli to run the CreateXHarnessAppleWorkItems task. The issue seems to be just a failure in the SSL handshake communication. To view more details, you can get to the log of the failing build here.

For convenience, I’m pasting the stack trace of the failure below:

##[error].packages/microsoft.dotnet.helix.sdk/7.0.0-beta.22171.2/tools/xharness-runner/XHarnessRunner.targets(122,5): error MSB4018: The "CreateXHarnessAppleWorkItems" task failed unexpectedly.
System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: RevocationStatusUnknown
   at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
   --- End of inner exception stack trace ---
   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(HttpRequestMessage request)
   at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.GetHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
   at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
   at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
   at Microsoft.DotNet.Helix.Sdk.ProvisioningProfileProvider.<>c__DisplayClass14_0.<<DownloadProvisioningProfile>b__0>d.MoveNext() in /_/src/Microsoft.DotNet.Helix/Sdk/ProvisioningProfileProvider.cs:line 190
--- End of stack trace from previous location ---
   at Microsoft.Arcade.Common.Helpers.<>c__DisplayClass7_0.<DirectoryMutexExec>b__0() in /_/src/Common/Microsoft.Arcade.Common/Helpers.cs:line 71
   at Microsoft.Arcade.Common.Helpers.MutexExec[T](Func`1 function, String mutexName) in /_/src/Common/Microsoft.Arcade.Common/Helpers.cs:line 45
   at Microsoft.Arcade.Common.Helpers.DirectoryMutexExec[T](Func`1 function, String path) in /_/src/Common/Microsoft.Arcade.Common/Helpers.cs:line 64
   at Microsoft.Arcade.Common.Helpers.DirectoryMutexExec(Func`1 function, String path) in /_/src/Common/Microsoft.Arcade.Common/Helpers.cs:line 71
   at Microsoft.DotNet.Helix.Sdk.ProvisioningProfileProvider.DownloadProvisioningProfile(ApplePlatform platform) in /_/src/Microsoft.DotNet.Helix/Sdk/ProvisioningProfileProvider.cs:line 179
   at Microsoft.DotNet.Helix.Sdk.ProvisioningProfileProvider.AddProfileToPayload(String archivePath, String testTarget) in /_/src/Microsoft.DotNet.Helix/Sdk/ProvisioningProfileProvider.cs:line 99
   at Microsoft.DotNet.Helix.Sdk.CreateXHarnessAppleWorkItems.PrepareWorkItem(IZipArchiveManager zipArchiveManager, IFileSystem fileSystem, IProvisioningProfileProvider provisioningProfileProvider, ITaskItem appBundleItem) in /_/src/Microsoft.DotNet.Helix/Sdk/CreateXHarnessAppleWorkItems.cs:line 189
   at Microsoft.DotNet.Helix.Sdk.CreateXHarnessAppleWorkItems.ExecuteTask(IProvisioningProfileProvider provisioningProfileProvider, IZipArchiveManager zipArchiveManager, IFileSystem fileSystem) in /_/src/Microsoft.DotNet.Helix/Sdk/CreateXHarnessAppleWorkItems.cs:line 81

@radical do you mind tagging the right people that should be looking into this?

About this issue

Original URL
State: closed
Created 2 years ago
Comments: 22 (22 by maintainers)

Commits related to this issue

Update Microsoft.DotNet.Helix.Sdk Extracted from https://github.com/dotnet/runtime/pull/67771 to get the fix for https://github.com/dotnet/runtime/issues/67349 — committed to akoeplinger/runtime by akoeplinger 2 years ago
Update Microsoft.DotNet.Helix.Sdk (#68024) Extracted from https://github.com/dotnet/runtime/pull/67771 to get the fix for https://github.com/dotnet/runtime/issues/67349 Updates the WASM tests to a... — committed to dotnet/runtime by akoeplinger 2 years ago
Update Microsoft.DotNet.Helix.Sdk (#68024) Extracted from https://github.com/dotnet/runtime/pull/67771 to get the fix for https://github.com/dotnet/runtime/issues/67349 Updates the WASM tests to a... — committed to directhex/runtime by akoeplinger 2 years ago
Update Microsoft.DotNet.Helix.Sdk (#68024) Extracted from https://github.com/dotnet/runtime/pull/67771 to get the fix for https://github.com/dotnet/runtime/issues/67349 Updates the WASM tests to a... — committed to rzikm/dotnet-runtime by akoeplinger 2 years ago

Most upvoted comments

There were no occurrences in the last 6 days so feels like the fix helped. I think we can close this @joperezr

premun on Apr 27, 2022

RevocationStatusUnknown means one of

The root certificate of the remote party could not be determined (should also say PartialChain)
The root certificate of the remote party was not trusted (should also say UnknownRootAuthority)
The client is running .NET 7 Preview 3 on Linux and some cert in the chain is expired (should also say NotTimeValid)
The cached revocation data didn’t exist or was expired and new data couldn’t be obtained:
- Firewall prevented the connection
- The revocation data host was down
- Timeout
- No available client sockets
- Any other kind of networking problem

Since no other status code was reported (or the exception only prints one) it sounds like just intermittency (unless it’s a firewall configuration problem). But for a revocation host problem it may take longer to recover than “try three times”.

bartonjs on Apr 6, 2022