How to deal with ServerCertificateCustomValidationCallback?,

Question

Hi,

How to deal with ServerCertificateCustomValidationCallback?,

I occasionally facing the codes goes to the ServerCertificateCustomValidationCallback, I expect to retry it..

                    HttpClientHandler clientHandler = new HttpClientHandler();  
                    //clientHandler.SslProtocols = System.Security.Authentication.SslProtocols.Tls13;  
                    clientHandler.ServerCertificateCustomValidationCallback += (sender, cert, chain, sslPolicyErrors) =>  
                    {  
                        return true;  
                    };  
  
                    var client = new HttpClient(clientHandler);  
                    var url = new Uri($"https://xxx.xxx.com/?per_page=500&page={pageNo}");  
  
                    client.DefaultRequestHeaders.Accept.Clear();  
                    client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));  
                    client.DefaultRequestHeaders.Authorization = new System.Net.Http.Headers.AuthenticationHeaderValue("Token", token);  
  
                    var response = await client.GetAsync(url);  
                    HttpStatusCode statusCode = response.StatusCode;  

Answer 1

not sure your question. the default certificate validation checks the certificate chain to determine if valid. your code says, trust any certificate, that is do no validation.