[release/8.0-staging] Handle OSSL 3.4 change to SAN:othername formatting by vcsjones · Pull Request #115367

[release/8.0-staging] Handle OSSL 3.4 change to SAN:othername formatting by vcsjones · Pull Request #115367 · dotnet/runtime

Backport of #111820 to release/8.0-staging

/cc @vcsjones @bartonjs

Customer Impact

Customer reported
Found internally

This is a test-only change to react to a change in OpenSSL 3.4 that is starting to appear in our CI pipelines. OpenSSL 3.4 formats a UPN in an otherName SAN differently.

Regression

Yes
No
Upstream Change

Reacting to an upstream change in OpenSSL 3.4 that was introduced here openssl/openssl@de8861a

Testing

Existing tests caught the change. Tests pass after conditionally handling the OpenSSL 3.4 change, so that tests will continue to pass on older OpenSSL versions, too.

Risk

Low. Test only change.

IMPORTANT: If this backport is for a servicing release, please verify that:

The PR target branch is release/X.0-staging, not release/X.0.