447 questions
How do I attach an SSL certificate to access SOAP services with .NET Framework 4.8?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Avinash Singh
0
Reputation points
Hello everyone, We have a requirement to attach the SSL certificate while consuming SOAP services. We are getting an error as "Could not establish secure channel for SSL/TLS with authority 'url.com:portnumber'/". Inner Exception WebException: The request was aborted: Could not create SSL/TLS secure channel when we try to attach it using .net framework 4.8, However, we can make the connection with the same URL and same certificate using .Net core 6.0. After further research, we found that the certificate is attached with .NetFramework 4.8 but it's not reaching the SOAP service. Is there any such limitation with .Net framework 4.8 or is there any different way of attaching the SSL certificate using .net framework 4.8? I am using the sample code below to attach the SSL cert, System. Net. ServicePointManager.SecurityProtocol = System.Net. SecurityProtocolType. Tls12; InqSvc_v1_0Client serviceClient = new InqSvc_v1_0Client("SOAPURL"); serviceClient.ClientCredentials.ClientCertificate.SetCertificate(StoreLocation.LocalMachine, StoreName. Root, X509FindType.FindBySerialNumber, "SSL_CertSerialNumber"); res.InqRs = serviceClient.Inq(ss); Any help will be greatly appreciated!
Developer technologies ASP.NET ASP.NET API
Developer technologies ASP.NET Other
3,597 questions
{count} votes
-
AgaveJoe 30,126 Reputation points2024-02-15T15:13:22.33+00:00 Usually this error is due to a TLS mismatch between the client and server. I assume the issue is between computer running the 4.8 code and the server. Check the TLS versions available one both systems See the official documentation. Transport Layer Security (TLS) best practices with the .NET Framework
-
Avinash Singh 0 Reputation points
2024-02-15T17:05:10.9+00:00 Thanks for your response. Client and server-side code are running in the same machine in debug mode using TLS1.2
-
Avinash Singh 0 Reputation points
2024-02-15T17:06:28.8533333+00:00 I could see the SSL certificate object attached to the request context but it becomes null when it reaches the SOAP service And Context.Request.ClientCertificate.IsPresent becomes false
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 36%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELH%3C/text%3E%3C/svg%3E)
Lan Huang-MSFT 30,186 Reputation points Microsoft External Staff2024-02-16T09:50:59.1433333+00:00 Hi @Avinash Singh, Ensure you run Visual Studio as an administrator and check the security mode in the configuration and check the
targetFrameworkversion in your<httpRuntime>element, as this determines which runtime is actually used by your site.<bindings> <basicHttpBinding> <binding name="xxxBinding"> <security mode="Transport"> <transport clientCredentialType="Certificate"/> </security> </binding> </basicHttpBinding> </bindings> -
Avinash Singh 0 Reputation points
2024-02-16T16:36:27.99+00:00 Thank you for the response. We added these configurations in BasicHttpsBinding before making the call but facing the same issue. Just to add we are able to make this working through .net core 6 in the same machine with the same certificate permissions without any issues. binding.Security.Mode = BasicHttpsSecurityMode.Transport; binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Certificate;
-
Lan Huang-MSFT 30,186 Reputation points Microsoft External Staff
2024-02-20T07:23:46.97+00:00 Hi @Avinash Singh, Sorry, I can't reproduce your problem. I found a similar situation to yours, maybe you can try the solution mentioned there. https://stackoverflow.com/q/73070505
Sign in to comment
Sign in to answer