Skip to content

Clarify doc for HttpsConnectionAdapterOptions.ClientCertificateValidation - #69686

Merged
SamMonoRT merged 2 commits into
dotnet:mainfrom
elinor-fung:doc-ClientCertificateValidation
Oct 8, 2026
Merged

SamMonoRT merged 2 commits into
dotnet:mainfrom
elinor-fung:doc-ClientCertificateValidation

Conversation

@elinor-fung

Copy link
Copy Markdown
Member

Clarify doc for HttpsConnectionAdapterOptions.ClientCertificateValidation

  • You've read the Contributor Guide and Code of Conduct.
  • You've included unit or integration tests for your change, where applicable.
  • You've included inline docs for your change, where applicable.
  • There's an open issue for the PR that you are making. If you'd like to propose a new feature or change, please open an issue to discuss the change or find an existing issue.

Description

Update doc for HttpsConnectionAdapterOptions.ClientCertificateValidation to make it clearer that the callback, if set, is the validation check, not additional validation on top of default checks.

Copilot AI balanced review requested due to automatic review settings October 6, 2026 18:28
@github-actions github-actions Bot added the area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions label Oct 6, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The documentation now accurately reflects the implementation, with no runtime behavior changes.

Review effort: Balanced
Findings: None

What changed in this PR

Clarifies that custom client-certificate validation replaces Kestrel’s default certificate policy check.

Changes:

  • Corrects the XML documentation for ClientCertificateValidation.
  • Retains guidance about AllowAnyClientCertificate.
File Description
src/​Servers/​Kestrel/​Core/​src/​HttpsConnectionAdapterOptions.cs Clarifies custom client-certificate validation behavior.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

@SamMonoRT
SamMonoRT merged commit d50fa2d into dotnet:main Oct 8, 2026
29 checks passed
@elinor-fung
elinor-fung deleted the doc-ClientCertificateValidation branch October 8, 2026 18:03
@dotnet-milestone-bot dotnet-milestone-bot Bot added this to the 12.0-preview1 milestone Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants