@@ -288,13 +288,13 @@ public static void SystemTrustCertificateWithCustomRootTrust(bool addCertificate
288288
289289 // Check some known conditions.
290290
291- if ( PlatformDetection . UsesAppleCrypto )
291+ if ( OperatingSystem . IsLinux ( ) || PlatformDetection . IsApplePlatform26OrLater )
292292 {
293- Assert . Equal ( 3 , chain . ChainElements . Count ) ;
293+ Assert . Equal ( 2 , chain . ChainElements . Count ) ;
294294 }
295- else if ( OperatingSystem . IsLinux ( ) )
295+ else if ( PlatformDetection . IsApplePlatform )
296296 {
297- Assert . Equal ( 2 , chain . ChainElements . Count ) ;
297+ Assert . Equal ( 3 , chain . ChainElements . Count ) ;
298298 }
299299 }
300300 }
@@ -1179,12 +1179,12 @@ public static void BuildChainForCertificateSignedWithDisallowedKey()
11791179 chain . ChainPolicy . ExtraStore . Add ( intermediateCert ) ;
11801180 Assert . False ( chain . Build ( cert ) ) ;
11811181
1182- if ( PlatformDetection . IsAndroid )
1182+ if ( PlatformDetection . IsAndroid || PlatformDetection . IsApplePlatform26OrLater )
11831183 {
11841184 // Android always validates trust as part of building a path,
11851185 // so violations comes back as PartialChain with no elements
1186+ // Apple 26 no longer block these SKIs since the roots are no longer trusted at all and are expired.
11861187 Assert . Equal ( X509ChainStatusFlags . PartialChain , chain . AllStatusFlags ( ) ) ;
1187- Assert . Equal ( 0 , chain . ChainElements . Count ) ;
11881188 }
11891189 else
11901190 {
0 commit comments