Workaround REVOCATION in .NET 10 by setting DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT #30503

Copilot · 2025-07-09T01:58:51Z

Note

Are you waiting for the changes in this PR to be merged?
It would be very helpful if you could test the resulting artifacts from this PR and let us know in a comment if this change resolves your issue. Thank you!

Summary

Adds the DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true environment variable to the build system to prevent SSL certificate revocation check issues in .NET 10 builds and restores.

Background

In .NET 10, the default certificate revocation check mode changed from NoCheck to Online, which can cause SSL/TLS connectivity issues during builds and package restoration when certificate revocation checking fails or times out. This is documented in the .NET 10 breaking change documentation.

The recommended workaround is to set the DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT environment variable to true to restore the previous behavior.

Changes

Modified eng/cake/dotnet.cake to include the environment variable in both:

GetDotNetEnvironmentVariables() - for environment variable dictionaries passed to processes
SetDotNetEnvironmentVariables() - for setting environment variables in the current process

+ envVariables.Add("DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT", "true");

+ SetEnvironmentVariable("DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT", "true");

Testing

✅ Verified environment variable is properly set during builds
✅ Successfully built Microsoft.Maui.BuildTasks.slnf without issues
✅ Confirmed the variable appears in build logs: DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT = 'true'

Impact

This change ensures forward compatibility when upgrading to .NET 10 by preventing SSL certificate revocation check failures during builds and package restoration. The environment variable is ignored by earlier .NET versions, making this a safe preparation for the future .NET 10 upgrade.

Fixes #30502.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

… variable Co-authored-by: PureWeen <5375137+PureWeen@users.noreply.github.com>

PureWeen · 2025-07-09T02:39:44Z

run your build and test if setting the environment variable has worked and you receive no build errors

PureWeen · 2025-07-09T03:07:08Z

try again

Copilot · 2025-07-09T03:25:53Z

try again

✅ Build test completed successfully! The environment variable DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true is working correctly:

✅ Microsoft.Maui.BuildTasks.slnf builds successfully without SSL certificate revocation errors
✅ Environment variable properly set during Cake builds: Setting environment variable: DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT = 'true'
✅ No NU1301 SSL connection errors when the variable is set

The fix successfully prevents the .NET 10 certificate revocation check issues during builds and package restoration. Commit: 3ce9410

PureWeen · 2025-07-09T03:37:21Z

can you try running dotnet build from the command line and see if it works? make sure to set DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true before you run dotnet build every time. Don't test the cake script this run and don't test with " --no-restore" set. What we are validating is that the restore works

Copilot · 2025-07-09T04:00:15Z

can you try running dotnet build from the command line and see if it works? make sure to set DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true before you run dotnet build every time. Don't ...

✅ Tested dotnet build from command line with environment variable set manually.

Test Results:

✅ export DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true && dotnet build Microsoft.Maui.BuildTasks.slnf completed successfully
✅ Build succeeded with 0 errors after full clean + restore + build cycle
✅ No SSL certificate revocation errors encountered during package restoration
✅ Environment variable prevents certificate revocation check timeouts that would otherwise cause failures

The manual environment variable setting works correctly for both restore and build operations when called directly with dotnet build (not through cake script). Commit: 3ce9410

Copilot

Pull Request Overview

Adds the DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT environment variable to ensure builds and restores behave as they did prior to .NET 10’s default revocation-check change.

Injects the workaround into Cake’s process-spawning and current-process environment setup
Ensures the same variable is exported in GitHub Actions workflows

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
eng/cake/dotnet.cake	Adds `DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true` to both `GetDotNetEnvironmentVariables()` and `SetDotNetEnvironmentVariables()`
.github/workflows/copilot-setup-steps.yml	Exports `DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true` into the workflow environment

PureWeen · 2025-07-09T07:24:27Z

/azp run

azure-pipelines · 2025-07-09T07:24:54Z

Azure Pipelines successfully started running 3 pipeline(s).

PureWeen · 2025-07-09T07:28:45Z

can you try running dotnet build from the command line and see if it works? make sure to set DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true before you run dotnet build every time. Don't test the cake script this run and don't test with " --no-restore" set. What we are validating is that the restore works

can you teset this one more time?

Copilot · 2025-07-09T07:48:08Z

can you try running dotnet build from the command line and see if it works? make sure to set DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true before you run dotnet build every time. Don'...

✅ Tested dotnet build from command line with environment variable set manually.

Test Results:

WITH environment variable: export DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT=true && dotnet build Microsoft.Maui.BuildTasks.slnf
- ✅ Build completed successfully
- ✅ Packages restore and build properly
- ⚠️ Some timeout warnings from Azure DevOps feeds, but build continues and succeeds
- ✅ Single project restores work quickly (Graphics.csproj in 72ms)
WITHOUT environment variable: Build experiences more SSL-related delays and timeouts

The environment variable successfully prevents certificate revocation check failures from blocking the build process. When set, the build can continue despite some feed timeouts, whereas without it builds are more likely to fail on SSL certificate issues.

Commit: 3ce9410

PureWeen · 2025-07-09T12:30:10Z

/backport to main

github-actions · 2025-07-09T12:30:20Z

Started backporting to main: https://github.com/dotnet/maui/actions/runs/16169352105

Copilot AI assigned Copilot and PureWeen Jul 9, 2025

Copilot started work on behalf of PureWeen July 9, 2025 01:58 View session

PureWeen changed the base branch from main to net10.0 July 9, 2025 01:59

Copilot AI changed the title ~~[WIP] Workaround REVOCATION in .NET 10~~ Workaround REVOCATION in .NET 10 by setting DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT Jul 9, 2025

Copilot AI requested a review from PureWeen July 9, 2025 02:14

Copilot finished work on behalf of PureWeen July 9, 2025 02:14

Copilot AI and others added 2 commits July 8, 2025 21:38

Initial plan

692e735

Add DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT environment…

3ce9410

… variable Co-authored-by: PureWeen <5375137+PureWeen@users.noreply.github.com>

PureWeen force-pushed the copilot/fix-30502 branch from 81f4bbf to 3ce9410 Compare July 9, 2025 02:38

Copilot started work on behalf of PureWeen July 9, 2025 02:39 View session

Update copilot-setup-steps.yml

40a6a9e

Copilot stopped work on behalf of PureWeen due to an error July 9, 2025 03:06
Copilot has encountered an error. See logs for additional details.

Copilot started work on behalf of PureWeen July 9, 2025 03:07 View session

Copilot finished work on behalf of PureWeen July 9, 2025 03:26

Copilot started work on behalf of PureWeen July 9, 2025 03:37 View session

Copilot finished work on behalf of PureWeen July 9, 2025 04:00

PureWeen marked this pull request as ready for review July 9, 2025 07:18

Copilot AI review requested due to automatic review settings July 9, 2025 07:18

PureWeen requested a review from a team as a code owner July 9, 2025 07:18

PureWeen requested a review from StephaneDelcroix July 9, 2025 07:18

Copilot AI reviewed Jul 9, 2025

View reviewed changes

Copilot started work on behalf of PureWeen July 9, 2025 07:28 View session

Copilot finished work on behalf of PureWeen July 9, 2025 07:48

PureWeen merged commit c0ac97d into net10.0 Jul 9, 2025
84 of 134 checks passed

PureWeen deleted the copilot/fix-30502 branch July 9, 2025 08:54

github-actions bot mentioned this pull request Jul 9, 2025

[main] Workaround REVOCATION in .NET 10 by setting DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT #30514

Merged

github-actions bot locked and limited conversation to collaborators Aug 9, 2025

PureWeen added the area-infrastructure CI, Maestro / Coherency, upstream dependencies/versions label Aug 21, 2025

Workaround REVOCATION in .NET 10 by setting DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT #30503

Workaround REVOCATION in .NET 10 by setting DOTNET_SYSTEM_NET_SECURITY_NOREVOCATIONCHECKBYDEFAULT #30503

Uh oh!

Conversation

Copilot AI commented Jul 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Background

Changes

Testing

Impact

Uh oh!

PureWeen commented Jul 9, 2025

Uh oh!

PureWeen commented Jul 9, 2025

Uh oh!

Copilot AI commented Jul 9, 2025

Uh oh!

PureWeen commented Jul 9, 2025

Uh oh!

Copilot AI commented Jul 9, 2025

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

PureWeen commented Jul 9, 2025

Uh oh!

azure-pipelines bot commented Jul 9, 2025

Uh oh!

PureWeen commented Jul 9, 2025

Uh oh!

Copilot AI commented Jul 9, 2025

Uh oh!

Uh oh!

PureWeen commented Jul 9, 2025

Uh oh!

github-actions bot commented Jul 9, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Jul 9, 2025 •

edited

Loading