Re: Requesting web page from SSL site fails

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 01/13/05


Date: Wed, 12 Jan 2005 19:23:05 -0600

BTW, you can control that behavior in .NET code by implementing your own
custom ICertificatePolicy class and setting that on the ServicePointManager,
but fixing the cert is always best.

Joe K.

"Tim Mavers" <webview@hotmail.com> wrote in message
news:VNWdnfubE6Sp83jcRVn-uQ@giganews.com...
> "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
> in message news:udaOdDD9EHA.3236@TK2MSFTNGP15.phx.gbl...
>> The main reason SSL requests with HttpWebRequest fail is something wrong
>> with the server certificate (name on cert doesn't match the hostname
>> requested by client, cert is revoked, cert is expired, cert is not
>> trusted). It is less likely that you need a client certificate, although
>> the server may be requesting one. You should be able to find that out
>> with a web browser or something.
>
> Yes, that was the problem, there as an issue with the cert on the server.
> We were getting warning dialogs about "cert not being fully trusted", but
> accepting "yes" would work fine (from the browser). However, apparently
> the API itself will default to reject this.
>
> Once we straightened out the cert, HttpWebRequest works fine.
>
> Thanks for all the help.
>



Relevant Pages

  • Error issuing certificates from WS03 cert svc
    ... I'm having trouble with issuing certificates from a Windows Server 2003 enterprise issuing CA. ... The CA rejects requests with a warning in the Windows Application Log: "Certificate Services denied request 932 because: The revocation function was unable to check revocation because the revocation server was offline. ... The policy CA has a revoked CA cert superseeded by a renewed valid CA cert. ...
    (microsoft.public.windows.server.security)
  • Re: Urgent !- Certificate Issue on IIS 5 with ISA server and OWA
    ... Do I need to do export the .pfx file to OWA as well ... > THe ISA server is supposedly redirecting requests to the right IP .. ... > In MMC on the server there is only one cert .. ...
    (microsoft.public.inetserver.iis.security)
  • Re: TLS Handshake issue
    ... on the server certficate if I do not supply the MANUAL_VALIDATION flag? ... certificate and then sent my client certificate? ... should get SEC_E_CERT_EXPIRED if the server cert is expired. ...
    (microsoft.public.platformsdk.security)
  • Re: [opensuse] stunnel certificates [partly solved]
    ... echo \>> server.keycrt ... The server.keycrt is the cert stunnel uses. ... With partial success I mean I can connect if I don't check the client certificate at the server. ... I believe the server can't find the client-certificate, ...
    (SuSE)
  • Re: Netcat through Squid HTTP Proxy
    ... >>this requests through some logic to determine if this is an OK request, ... >>new connection to the site requested, checks the certificate and sends the ... WebServer provides a valid cert, signed, etc. ...
    (Pen-Test)

Quantcast