[release/8.0-staging] use also SslCertificateTrust when constructing CertificateContext

[simonrozsival]

Backport of #103372 and #104016 to release/8.0-staging

Customer Impact

• Customer reported (Mutual Authentication: Certificate chain removed when connecting to server in MAUI app but not Xamarin Forms #100602)
• Found internally

Customers developing Android apps are currently unable to use mutual TLS authentication in certain cases as the SslStreamCertificateContext.Create(...) method will fail to build an X509Chain instance if the certificate isn't trusted by the OS due to the limitations of the Android platform.

Regression

• Yes
• No

Testing

Unit tests and manual testing on Android emulator.

Risk

Low. The change is mostly limited to Android where this API doesn't currently work in many cases.

/cc @vitek-karas @wfurt

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/ncl, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

[carlossanlop]

Friendly reminder that Monday July 15th is Code Complete day, that's the deadline to get this included in the August Release.

[rzikm]

LGTM

[matouskozak]

The System.Net.Http.WinHttpHandlerFunctional.Tests.BidirectionStreamingTest.BackwardsCompatibility_DowngradeToHttp11 failures are unrelated as they are already present on release/8.0-staging rolling builds e.g. https://dev.azure.com/dnceng-public/public/_build/results?buildId=739868 and are tracked at #104390.

[matouskozak]

/azp run runtime-extra-platforms

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[matouskozak]

The runtime-extra-platforms failures are unrelated are can be seen failing on rolling builds as well. E.g. https://dev.azure.com/dnceng-public/public/_build/results?buildId=739937

[wfurt]

LGTM.