Re: Trusted connection problem

Yes, that's one way to do it. IE is usually pretty good at telling you
whether a given site's certificate will be trusted by a given client machine
as well and will show you the cert chain.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Eve" <Eve@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3BD7423A-B9B8-416D-B336-818DECA7A5C3@xxxxxxxxxxxxxxxx
I guess I could compare my list on the Trusted Root Certification
Authorities
tab in Internet Options against the list on my co-worker's machine...

"Eve" wrote:

How can I verify that my co-worker has the server's root CA certificate
installed on his machine?

"Joe Kaplan" wrote:

This is usually a problem with PKI and is not an error specific to .NET
security. It sounds like your workstation does not trust the issuer of
the
remote server's certificate. Normally when this happens, an error will
be
logged by schannel in the system event log on the client machine with
the
details. Providing this info would help.

If that is the problem, you can either fix the trust problem by
installing
the server's root CA cert in your client's trusted roots (better) or
code
around the problem to ignore this type of problem with the appropriate
validation callback.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"Eve" <Eve@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A411EFB4-5D6E-4F3F-A56B-59991CA1C356@xxxxxxxxxxxxxxxx
I have an application that performs an http post to the remote server
using
SSL. When I run the app on my local machine, I get this error:

The underlying connection was closed: Could not establish trust
relationship
for the SSL/TLS secure channel.

When my co-worker runs the same app on his machine, everything works
fine.
He tried running the app on my machine under his network login with
no
success. He doesn't recall configuring his pc to be able to talk to
the
server.

I'm wondering if this error might have anything to do with .NET
security??
If it does, how can I compare my settings against my co-worker's?
I would appreciate any help. Thank you in advance!








.

Relevant Pages

  • Re: LDAPS
    ... Are you sure the DNS name of the DC matches the DNS name of the certificate ... should show up as an schannel error in the event log, ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM - Self SSL?
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... I did the following after installing the CA: ... certificate, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Do i need to got Https:// throught the website ???
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... I believe that one of these Certification's (SEI-CMM Level 5 Certificate, ... more then 20 website which are dynamic and used by the same users. ...
    (microsoft.public.dotnet.security)
  • Re: Integrated Windows Authentication Timeout?
    ... For the second search, if the user account has an SPN of HTTP/webserver, ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... You might consider enabling protocol transition authentication ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Integrated Windows Authentication Timeout?
    ... is the username of the user account that runs the service. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... You might consider enabling protocol transition authentication since ...
    (microsoft.public.dotnet.framework.aspnet.security)