简体繁体 English

WCF SSL客户端证书错误

[英]WCF SSL Client certificate error

原文 2012-10-03 10:39:24 9 1 c#/ wcf/ ssl/ windows-8

In our current project we're using a Tibco/Java webservice from our .NET 4.0/MVC/WCF client. 在我们当前的项目中，我们使用来自.NET 4.0 / MVC / WCF客户端的Tibco / Java Web服务。 We're using two way authentication. 我们正在使用两种方式的身份验证。 Our certificate is sent in the correct way, and the Tibco server sends back their certificate. 我们的证书以正确的方式发送，并且Tibco服务器发送回他们的证书。

Now this al works in Windows 2008 R2, using Visual Studio 2010/IIsExpress to run the web application. 现在，这一切都可以在Windows 2008 R2中使用Visual Studio 2010 / IIsExpress来运行Web应用程序。 But when using the exact same code on Windows 8/Visual Studio 2012 we're getting a lot of : 但是在Windows 8 / Visual Studio 2012上使用完全相同的代码时，我们会得到很多：

Could not establish trust relationship for the SSL/TLS secure channel with authority 无法使用授权建立SSL / TLS安全通道的信任关系

It used to work fine in Windows 2012 too, but without touching our integration (WCF) code this at first started to happen to my colleague and then on my machine too. 它过去在Windows 2012中也可以正常工作，但是在没有接触我们的集成（WCF）代码的情况下，这种情况首先在我的同事中发生，然后在我的计算机上也发生了。

The certificates are installed in the same store as in the Windows 2008 R2 machine, and we also see that the certificate is being used. 证书与Windows 2008 R2计算机安装在同一存储区中，并且我们还看到正在使用证书。

To be able to move forward we'll resort to our plan B which is back to using Visual Studio 2010/Windows 2008 R2. 为了能够继续前进，我们将使用计划B，该计划又回到使用Visual Studio 2010 / Windows 2008 R2。 So I was hoping someone else experienced the same problem and solved it. 所以我希望其他人也遇到同样的问题并解决。 So the question is, what could be wrong? 所以问题是，可能出什么问题了？

1 个解决方案

Could be the aspnet/networkservice/whatever user you're using for you AppPool doesn't have permission to read the certificate store? 您使用的aspnet / networkservice /任何用户是否可能是AppPool没有读取证书存储的权限？

Check this article 检查这篇文章

Particularly the "Install the client certificate and grant access for the user account" section. 特别是“安装客户端证书并授予用户帐户访问权限”部分。