Skip to content

Latest commit

 

History

History
39 lines (27 loc) · 1.32 KB

x509certificateclaimset_findclaims-considers-all-claimtypes.md

File metadata and controls

39 lines (27 loc) · 1.32 KB
Raw

X509CertificateClaimSet.FindClaims Considers All claimTypes

Scope

Minor

Version Introduced

4.6.1

Source Analyzer Status

Planned

Change Description

In apps that target the .NET Framework 4.6.1, if an X509 claim set is initialized from a certificate that has multiple DNS entries in its SAN field, the xref:System.IdentityModel.Claims.X509CertificateClaimSet.FindClaims(System.String,System.String)?displayProperty=name method attempts to match the claimType argument with all the DNS entries.

For apps that target previous versions of the .NET Framework, the xref:System.IdentityModel.Claims.X509CertificateClaimSet.FindClaims(System.String,System.String)?displayProperty=name method attempts to match the claimType argument only with the last DNS entry.

  • Quirked
  • Build-time break

Recommended Action

This change only affects applications targeting the .NET Framework 4.6.1. This change may be disabled (or enabled if targetting pre-4.6.1) with the DisableMultipleDNSEntries compatibility switch.

Affected APIs

  • M:System.IdentityModel.Claims.X509CertificateClaimSet.FindClaims(System.String,System.String)

Category

Windows Communication Foundation (WCF)