[ci-scan] Test failure: System.Net.Security.Tests.TlsSessionTests.SslStreamServer_RejectsClientCert_ClientObservesAlert on Nativ [Content truncated due to length] #131368

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1524755
Build error leg or test failing: linux-arm64 Release NativeAOT_Libs - System.Net.Security.Tests.TlsSessionTests.SslStreamServer_RejectsClientCert_ClientObservesAlert

Error Details

[FAIL] System.Net.Security.Tests.TlsSessionTests.SslStreamServer_RejectsClientCert_ClientObservesAlert(protocol: Tls12)
Assert.Throws() Failure: No exception was thrown
Expected: typeof(System.Security.Authentication.AuthenticationException)
   at System.Net.Security.Tests.TlsSessionTests.SslStreamServer_RejectsClientCert_ClientObservesAlert(SslProtocols) in /_/src/libraries/System.Net.Security/tests/FunctionalTests/TlsSessionTests.cs:line 452

On the linux-arm64 Release NativeAOT_Libs leg of runtime-nativeaot-outerloop, the server-side SslStream is expected to reject the client certificate and surface an AuthenticationException to the caller, but no exception is thrown, so the Assert.Throws<AuthenticationException> guard fails. The test passes on non-NativeAOT legs, so this looks specific to the NativeAOT libraries build.

Error Message

{
  "ErrorMessage": [
    "[FAIL] System.Net.Security.Tests.TlsSessionTests.SslStreamServer_RejectsClientCert_ClientObservesAlert",
    "Assert.Throws() Failure: No exception was thrown",
    "Expected: typeof(System.Security.Authentication.AuthenticationException)"
  ],
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Additional Context

Failed in (2 distinct builds):

• runtime-nativeaot-outerloop 1524755 (2026-07-24) — source build
• runtime-nativeaot-outerloop 1525821 (2026-07-25) — follow-up build, same signature

First build it occurred: 1524755 (2026-07-24). The signature is absent from the three preceding builds (1524187, 1523104, 1522302), so this is a fresh regression rather than a persistent failure.

Impacted: runtime-nativeaot-outerloop + linux-arm64 + NativeAOT_Libs.

Filed by ci-failure-scan (detection only). ci-failure-fix walks open [ci-scan] KBEs and either opens a small fix PR or comments here to loop in owners — it never disables the test.

network:
  allowed:
    - defaults
    - "awmgmcpg"

Generated by CI Outer-Loop Failure Scanner · 519.3 AIC · ⌖ 17.1 AIC · ⊞ 18.6K · ◷

Report

Summary