基础连接已经关闭: 未能为 SSL/TLS 安全通道建立信任关系
2016-05-24 00:00
459 查看
英文:The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel
使用HttpWebRequest 访问 https://mapi.alipay.com/gateway.do?...支付宝接口时 在本机WIN10 64位环境 完全没问题,使用firefox,IE Edge打开也没问题,但是在win2003 server 上报错:基础连接已经关闭: 未能为 SSL/TLS 安全通道建立信任关系,用IE 无法打开链接,如果在win2003 上使用fiddler 打开链接会弹出对话框提示:
Session #8: The remote server (mapi.alipay.com) presented a certificate that did not validate, due to RemoteCertificateChainErrors.
0 - 无法验证证书的签名。。。如果忽略错误则可正常访问。
原因:证书没官方签名?
We checked the credentials passed; it seems everything was fine. But still it was failing whenever we make the request to the server with the above same message. When we checked their environment, we found customer uses the self-signed certificate on the server. This is because, by default, .NET checks whether SSL certificates are signed by a certificate from the Trusted Root Certificate store.
解决方案:
请求之前加上下面得代码即可,简洁实用
1.
ServicePointManager.ServerCertificateValidationCallback = (sender, certificate, chain, sslPolicyErrors) => true;
2.
ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback ( delegate { return true; } );
这样做会潜在一定风险
所有验证都会通过,不论是否证书是无效得。whatever
,还有其他方案? 或者针对特定链接这样做就好了
1.This will accept all certificates, regardless of why they are invalid, which resolved the customer’s issue.
By validating the X509 certificate provided by the computer running Microsoft Exchange Server 2007 for SSL over HTTP, you help to provide a layer of security for the client application. You must validate certificates before you can start programming with Exchange Web Services proxy classes. If the callback is not set up, the first call will fail with a certificate error.
2.This solution could be potential security threat as you are turning off the SSL certificate validation. If this is production code, understand the risk of the server you are connecting to.
相关文章推荐
- odi接口抽取数据报错提示Create Unique Index on flow table创建唯一索引失败解决方法
- Mac下获取AppStore安装包文件路径
- 使用C#的HttpWebRequest模拟登陆访问人人网(很好的一个例子,理解http的基本工作方式)
- 查看MSSQL数据库每个表占用的空间大小
- PostgresqlODBC 链接字符串的写法
- 如何训练自己的编程思路
- 在直播应用中添加Faceu效果
- 菜鸟的B4A(B4X)开发成长日志第二天
- tableview 没有数据显示的时候,插入无数据的view
- C语言修炼日记 ——log.h
- 用ssh,加插件ckeditor,完成文件图片上传
- 堡垒机-麒麟堡垒机动态口令使用手册
- 森果SENGO开创婚礼产业共享经济时代
- 一个企业网站是如何变成僵尸网站的
- 新手如何自己建立一个网站
- 如何从socket到tomcat
- 如何解决CSS伪类hover在IE8中失效的问题?
- ThinkSNS系统升级,版本多样化
- MYSQL基本操作
- shell基本操作