Port System.Net.Http to OpenBSD by am11 · Pull Request #129475 · dotnet/runtime

am11 · 2026-06-16T19:49:43Z

Contributes to #124911.

dotnet-policy-service · 2026-06-16T19:51:08Z

Tagging subscribers to this area: @karelz, @dotnet/ncl
See info in area-owners.md if you want to be subscribed.

am11 · 2026-06-16T19:51:53Z

cc @sethjackson no test failure:

/home/am11/th/artifacts/bin/testhost/net11.0-openbsd-Debug-x64/dotnet exec --runtimeconfig System.Net.Http.Unit.Tests.runtimeconfig.json --depsfile System.Net.Http.Unit.Tests.deps.json xunit.console.dll System.Net.Http.Unit.Tests.dll -xml testResults.xml -nologo -nocolor -notrait category=IgnoreForCI -notrait category=OuterLoop -notrait category=failing
popd
===========================================================================================================
~/system.nethttp ~/system.nethttp
  Discovering: System.Net.Http.Unit.Tests (method display = ClassAndMethod, method display options = None)
  Discovered:  System.Net.Http.Unit.Tests (found 964 test cases)
  Starting:    System.Net.Http.Unit.Tests (parallel test collections = on [5 threads], stop on fail = off)
    System.Net.Http.Tests.CacheControlHeaderValueTest.ToString_NegativeValues_UsesMinusSignRegardlessOfCurrentCulture [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.ParseInt32EnvironmentVariableValue_WhenNotSet_DefaultIsUsed [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingInt32_InvalidValue_FallbackToDefault [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingSwitch_AppContextHasPriority [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.ParseDoubleEnvironmentVariableValue_ValidValue [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.ParseInt32EnvironmentVariableValue_InvalidValue_FallbackToDefault [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingInt32_EnvironmentVariable [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingSwitch_InvalidValue_FallbackToDefault [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingInt32_AppContextHasPriority [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.ParseDoubleEnvironmentVariableValue_InvalidValue_FallbackToDefault [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingSwitch_EnvironmentVariable [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingSwitch_WhenNotSet_DefaultIsUsed [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.ParseInt32EnvironmentVariableValue_ValidValue [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.QueryRuntimeSettingInt32_WhenNotSet_DefaultIsUsed [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.RuntimeSettingParserTest.ParseDoubleEnvironmentVariableValue_WhenNotSet_DefaultIsUsed [SKIP]
      Condition(s) not met: "SupportsRemoteExecutor (TargetInvocationException)"
    System.Net.Http.Tests.DiagnosticsHelperTest.GetRedactedUriString_DisableUriRedaction_DoesNotRedactUri [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.SystemProxyInfoTest.Ctor_ProxyEnvironmentVariableSet_IsHttpEnvironmentProxy [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.SystemProxyInfoTest.Ctor_NoEnvironmentVariables_NotHttpEnvironmentProxy [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_CredentialParsing_DefaultCredentials [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_TryCreateAndPossibleCgi_HttpProxyUpperCaseDisabledInCgi [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_TryCreate_CaseInsensitiveVariables [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_Uri_Parsing [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_EnvironmentProxy_Loaded [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_CredentialParsing_Basic [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpEnvironmentProxyTest.HttpProxy_Exceptions_Match [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HeaderEncodingTest.GetHeaderValue_RoundTrips_ReplacesDangerousCharacters(input: "😃", encodingName: null) [SKIP]
      The test case is invalid for the default encoding.
    System.Net.Http.Tests.HeaderEncodingTest.GetHeaderValue_RoundTrips_ReplacesDangerousCharacters(input: "\xffff", encodingName: null) [SKIP]
      The test case is invalid for the default encoding.
    System.Net.Http.Tests.HeaderEncodingTest.GetHeaderValue_RoundTrips_ReplacesDangerousCharacters(input: "�", encodingName: null) [SKIP]
      The test case is invalid for the default encoding.
    System.Net.Http.Tests.HeaderEncodingTest.GetHeaderValue_RoundTrips_ReplacesDangerousCharacters(input: "🙈🙉🙊", encodingName: null) [SKIP]
      The test case is invalid for the default encoding.
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_Multi_ConcurrentUse_Success [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_Local_Parsing [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_WindowsProxy_Loaded [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.GetProxy_ManualSettingsOnly_ManualSettingsUsed [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_WindowsProxy_Manual_Loaded [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_Multi_Success [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.IsBypassed_ReturnsFalse [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.GetProxy_BothAutoDetectAndManualSettingsButFailedAutoDetect_ManualSettingsUsed [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_WindowsProxy_PAC_Loaded [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
    System.Net.Http.Tests.HttpWindowsProxyTest.HttpProxy_Local_Bypassed [SKIP]
      Condition(s) not met: "IsSupported (TargetInvocationException)"
  Finished:    System.Net.Http.Unit.Tests
=== TEST EXECUTION SUMMARY ===
   System.Net.Http.Unit.Tests  Total: 2589, Errors: 0, Failed: 0, Skipped: 39, Time: 32.408s
~/system.nethttp

sethjackson · 2026-06-16T20:26:38Z

Nice! Did you not need the target fx change in System.Net.Security in conjunction so the managed TLS stuff works? Eg the csproj change in #129379?

The native SSL library lookup here is much better than what I hacked up previously. 😅

am11 · 2026-06-16T20:44:14Z

@sethjackson, ops I haven't seen that PR. OpenSSL is what .NET officially support and LibreSSL at some point used to work few years ago. But these days, it doesn't work as it is missing some required symbols like CRYPTO_clear_free we depend on. So it's much better to declare openssl as required.

This PR is adding lookup probe fro eopenssl<N>/libssl.so.<X>.<Y> and picks up the highest version on OpenBSD.

I suggest we close the other PR as this one is fixing it based on succeeding unit tests.

sethjackson · 2026-06-16T20:55:59Z

Oh no worries at all! This one is better anyways. :)

Yeah understood on OpenSSL. I think that System.Net.Security needs opted in on OpenBSD and I thought the System.Net.Http stuff needed the managed TLS layer to work but it appears not. 💯

am11 · 2026-06-16T20:58:02Z

Opened #129479 for System.Net.Security. Note that I have these installed:

$ pkg_info | grep heimdal
heimdal-7.8.0       Kerberos 5 implementation
heimdal-libs-7.8.0  Heimdal libraries and headers

sethjackson · 2026-06-16T21:06:07Z

Awesome! Yeah I installed heimdal too but was still getting some issues. But I see you worked your magic over in the other PR. 💯

sethjackson · 2026-06-16T21:09:50Z

Oh BTW did you have to set LD_LIBRARY_PATH to /usr/local/lib/eopenssl35 to get this to work? I did with my changes but not sure if you had to with the updated shim code. I'm assuming so since it's the same DlOpen call at the end but wasn't sure. Only reason I ask is so that I can add it to the package README if needed for the eventual port submission.

am11 · 2026-06-16T21:16:08Z

Oh BTW did you have to set LD_LIBRARY_PATH to /usr/local/lib/eopenssl35 to get this to work? I did with my changes but not sure if you had to with the updated shim code. I'm assuming so since it's the same DlOpen call at the end but wasn't sure. Only reason I ask is so that I can add it to the package README if needed for the eventual port submission.

I had to set it initially, but then I added a probe which looks for /usr/local/lib/eopenssl prefix and finds /usr/local/lib/eopenssl35 or whichever "highest" number is available. Then picks up libssl.so.X.Y from there. Now we don't need to set LD_LIBRARY_PATH manually.

am11 · 2026-06-16T21:55:30Z

I just pushed versioning.targets change in these PRs, so order of merge is independent while the CI is happy.

sethjackson · 2026-06-17T00:54:20Z

I had to set it initially, but then I added a probe which looks for /usr/local/lib/eopenssl prefix and finds /usr/local/lib/eopenssl35 or whichever "highest" number is available. Then picks up libssl.so.X.Y from there. Now we don't need to set LD_LIBRARY_PATH manually.

Oh right. I skimmed the shim changes and failed to realize it looks in the /usr/local/lib/eopenssl prefix.

bartonjs · 2026-06-18T23:23:41Z


  <PropertyGroup>
-    <TargetFrameworks>$(NetCoreAppCurrent)-windows;$(NetCoreAppCurrent)-linux;$(NetCoreAppCurrent)-osx;$(NetCoreAppCurrent)-freebsd;$(NetCoreAppCurrent)-maccatalyst;$(NetCoreAppCurrent)-ios;$(NetCoreAppCurrent)-tvos;$(NetCoreAppCurrent)-browser;$(NetCoreAppCurrent)-wasi;$(NetCoreAppCurrent)-illumos;$(NetCoreAppCurrent)-solaris;$(NetCoreAppCurrent)-haiku;$(NetCoreAppCurrent)-android;$(NetCoreAppCurrent)</TargetFrameworks>
+    <TargetFrameworks>$(NetCoreAppCurrent)-windows;$(NetCoreAppCurrent)-linux;$(NetCoreAppCurrent)-osx;$(NetCoreAppCurrent)-freebsd;$(NetCoreAppCurrent)-openbsd;$(NetCoreAppCurrent)-maccatalyst;$(NetCoreAppCurrent)-ios;$(NetCoreAppCurrent)-tvos;$(NetCoreAppCurrent)-browser;$(NetCoreAppCurrent)-wasi;$(NetCoreAppCurrent)-illumos;$(NetCoreAppCurrent)-solaris;$(NetCoreAppCurrent)-haiku;$(NetCoreAppCurrent)-android;$(NetCoreAppCurrent)</TargetFrameworks>


Are the linux/freebsd/openbsd/solaris/haiku builds any different from one another?

For cryptography we build "unix", and then special variants for macOS-nee-OSX and friends.

runtime/src/libraries/System.Security.Cryptography/src/System.Security.Cryptography.csproj

Line 4 in ee2a8a9

<TargetFrameworks>$(NetCoreAppCurrent)-windows;$(NetCoreAppCurrent)-unix;$(NetCoreAppCurrent)-android;$(NetCoreAppCurrent)-osx;$(NetCoreAppCurrent)-ios;$(NetCoreAppCurrent)-tvos;$(NetCoreAppCurrent)-browser;$(NetCoreAppCurrent)</TargetFrameworks>

There are some "platform specific" blocks:

$ git grep -niE 'linux|haiku|solaris|osx|apple|illumos|bsd' -- ':/src/libraries/System.Net.Http/src/*cs' src/libraries/System.Net.Http/src/System/Net/Http/GlobalHttpSettings.cs:44: [SupportedOSPlatformGuard("linux")] src/libraries/System.Net.Http/src/System/Net/Http/GlobalHttpSettings.cs:51: (OperatingSystem.IsLinux() && !OperatingSystem.IsAndroid()) || OperatingSystem.IsWindows() || OperatingSystem.IsMacOS()); src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectHelper.cs:112: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectHelper.cs:152: // Resolving a non-existent hostname often leads to EAI_AGAIN/TryAgain on Linux, indicating a non-authoritative failure, eg. timeout. src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectHelper.cs:153: // Getting EAGAIN/TryAgain from a TCP connect() is not possible on Windows or Mac according to the docs and indicates lack of kernel resources on Linux, src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:61: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:129: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:204: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:243: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:326: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:357: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:479: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:522: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:558: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.Http3.cs:759:#if !ILLUMOS && !SOLARIS && !HAIKU src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/ConnectionPool/HttpConnectionPool.cs:278: // It breaks TLS resume on Linux src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/Http3Connection.cs:18: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/Http3RequestStream.cs:20: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/HttpConnectionPoolManager.cs:47:#if !ILLUMOS && !SOLARIS && !HAIKU src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/HttpConnectionPoolManager.cs:142:#if !ILLUMOS && !SOLARIS && !HAIKU src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/HttpConnectionPoolManager.cs:460:#if !ILLUMOS && !SOLARIS && !HAIKU src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/HttpConnectionSettings.cs:153: [SupportedOSPlatform("linux")] src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/SystemProxyInfo.OSX.cs:8: // On OSX we get default proxy configuration from either environment variables or the OSX system proxy. src/libraries/System.Net.Http/src/System/Net/Http/SocketsHttpHandler/SystemProxyInfo.Unix.cs:8: // On Unix (except for OSX) we get default proxy configuration from environment variables. If the

am11 · 2026-06-19T08:32:48Z

Tests continue to pass with fixed package probing (and dynamic SONAME) strategy. :)

am11 added 2 commits June 16, 2026 22:47

Port System.Net.Http to OpenBSD

f4aa91a

.

2218165

am11 requested review from janvorli, rzikm and wfurt June 16, 2026 19:50

github-actions Bot added the area-System.Net.Http label Jun 16, 2026

dotnet-policy-service Bot added the community-contribution Indicates that the PR has been added by a community member label Jun 16, 2026

am11 added the os-openbsd OpenBSD OS, currently not officially supported label Jun 16, 2026

sethjackson mentioned this pull request Jun 16, 2026

Enable System.Net.Http and System.Net.Security on OpenBSD #129379

Closed

.

c10306f

Merge branch 'main' into patch-46

8c96b3c

This was referenced Jun 17, 2026

The Operation will be canceled. The next steps may not contain expected logs. dotnet/dnceng#3008

Open

CI build failure: error CS8032: An instance of analyzer Microsoft.NetCore.CSharp.Analyzers.... cannot be created #129031

Open

am11 added 2 commits June 18, 2026 19:15

Merge branch 'main' into patch-46

305b90c

Merge branch 'main' into patch-46

21114d8

am11 commented Jun 18, 2026

View reviewed changes

Comment thread src/native/libs/System.Security.Cryptography.Native/opensslshim.c Outdated

bartonjs reviewed Jun 18, 2026

View reviewed changes

Comment thread src/native/libs/System.Security.Cryptography.Native/opensslshim.c Outdated

vcsjones reviewed Jun 18, 2026

View reviewed changes

Comment thread src/native/libs/System.Security.Cryptography.Native/opensslshim.c Outdated

bartonjs reviewed Jun 18, 2026

View reviewed changes

am11 added 2 commits June 19, 2026 04:33

Address CR feedback

67a06ff

Merge branch 'main' into patch-46

d2db8de

Conversation

am11 commented Jun 16, 2026

Uh oh!

dotnet-policy-service Bot commented Jun 16, 2026

Uh oh!

am11 commented Jun 16, 2026

Uh oh!

sethjackson commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

am11 commented Jun 16, 2026

Uh oh!

sethjackson commented Jun 16, 2026

Uh oh!

am11 commented Jun 16, 2026

Uh oh!

sethjackson commented Jun 16, 2026

Uh oh!

sethjackson commented Jun 16, 2026

Uh oh!

am11 commented Jun 16, 2026

Uh oh!

am11 commented Jun 16, 2026

Uh oh!

sethjackson commented Jun 17, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

bartonjs Jun 18, 2026

Choose a reason for hiding this comment

Uh oh!

am11 Jun 19, 2026

Choose a reason for hiding this comment

Uh oh!

am11 commented Jun 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

sethjackson commented Jun 16, 2026 •

edited

Loading