Solved

SSL Certificate Error - SOAP Exception

Posted on 2009-05-05
2
1,325 Views
Last Modified: 2013-11-16
Hi All,

I am trying to replicate a web service and client that is currently working in a production environment but I cannot get it to work locally for debugging.  The application has a login section that calls a web service that works in production but not locally.  There is also a web site that uses the service and this works locally without any issues.

An exception is thrown when ever the login part is called from the client application.  The login command is shown in the code section below.

When this line called an exception is thrown with with the following message:

"SOAP security negotiation with 'http://website.address/Service.svc/Service' for target 'http://website.address/Service.svc/Service' failed. See inner exception for more details."

and the inner message is:

"The X.509 certificate CN=website.address chain building failed. The certificate that was used has a trust chain that cannot be verified. Replace the certificate or change the certificateValidationMode. The revocation function was unable to check revocation for the certificate."

So it seems that the problem is an SSL certificate issue but I can't figure out why the Certificate is not trusted.  The certificate used by IIS is one I created and it appears to be valid when I view it, it states that it is intended for all application policies and that there is a private key that corresponds to the certificate and there is no 'X' mark indicating a bad cert.  
The only differences I can see between this certificate and the one used on the production machine are the issuer (the local one was issued by "Root Agency" whereas the production one was purchased from a well known Certificate provider) and the intended use for the production one is only:
Ensures the identity of a remote computer
Proves your identity to a remote computer

It seems that the certificate is not being accepted so I tried have added the Certificate to the local machine in in the both local machine and user personal and trusted route certification authorities stores.  I also added the Root Authority certificate to these to see if that was an issue.

The client on the  local machine is able to connect to the production if I remove the URL / IP changes without any SSL issues.

The local environment has been replicated as close as possible to production i.e. same OS, URLs mapped to local IP addresses, identical IIS 6.0 configuration etc.

I have seen some other threads about this that suggest turning off the SSL validation for debugging but is not really appropriate for the type of debugging / testing we wish to do.

This may just be a simple SSL configuration problem as my knowledge of it is not that good but I would really appreciate some help in resolving this issue.

Hopefully this will be simple to resolve,

Many thanks,
Stef
Using DocComms As New Threading.DocumentComms

...

DocComms.DriverServiceInstance.GetBasicUserInfo(LoginArgs.Balance, LoginArgs.RealName, My.Application.Info.Version.ToString(), Branding.Strings.Identity)

...

Open in new window

0
Comment
Question by:stefarg
  • 2
2 Comments
 
LVL 1

Accepted Solution

by:
stefarg earned 0 total points
ID: 24314209
Solution found here: http://www.somacon.com/p42.php
0
 
LVL 1

Author Comment

by:stefarg
ID: 24314239
Oh just in case that link becomes dead in the future, the solution involved using SelfSSL from the IIS 6.0 Resource Kit (http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b628-ade629c89499&DisplayLang=en)
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

It’s quite interesting for me as I worked with Excel using vb.net for some time. Here are some topics which I know want to share with others whom this might help. First of all if you are working with Excel then you need to Download the Following …
The ECB site provides FX rates for major currencies since its inception in 1999 in the form of an XML feed. The files have the following format (reducted for brevity) (CODE) There are three files available HERE (http://www.ecb.europa.eu/stats/exch…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now