How do I attach an SSL certificate to access SOAP services with .NET Framework 4.8?

Avinash Singh 0

Hello everyone, We have a requirement to attach the SSL certificate while consuming SOAP services. We are getting an error as "Could not establish secure channel for SSL/TLS with authority 'url.com:portnumber'/". Inner Exception WebException: The request was aborted: Could not create SSL/TLS secure channel when we try to attach it using .net framework 4.8, However, we can make the connection with the same URL and same certificate using .Net core 6.0. After further research, we found that the certificate is attached with .NetFramework 4.8 but it's not reaching the SOAP service. Is there any such limitation with .Net framework 4.8 or is there any different way of attaching the SSL certificate using .net framework 4.8? I am using the sample code below to attach the SSL cert, System. Net. ServicePointManager.SecurityProtocol = System.Net. SecurityProtocolType. Tls12; InqSvc_v1_0Client serviceClient = new InqSvc_v1_0Client("SOAPURL"); serviceClient.ClientCredentials.ClientCertificate.SetCertificate(StoreLocation.LocalMachine, StoreName. Root, X509FindType.FindBySerialNumber, "SSL_CertSerialNumber"); res.InqRs = serviceClient.Inq(ss); Any help will be greatly appreciated!

AgaveJoe 26,201 Reputation points

2024-02-15T15:13:22.33+00:00

Usually this error is due to a TLS mismatch between the client and server. I assume the issue is between computer running the 4.8 code and the server. Check the TLS versions available one both systems See the official documentation. Transport Layer Security (TLS) best practices with the .NET Framework
Avinash Singh 0 Reputation points

2024-02-15T17:05:10.9+00:00

Thanks for your response. Client and server-side code are running in the same machine in debug mode using TLS1.2
Avinash Singh 0 Reputation points

2024-02-15T17:06:28.8533333+00:00

I could see the SSL certificate object attached to the request context but it becomes null when it reaches the SOAP service And Context.Request.ClientCertificate.IsPresent becomes false
Lan Huang-MSFT 25,556 Reputation points Microsoft Vendor

2024-02-16T09:50:59.1433333+00:00
Hi @Avinash Singh, Ensure you run Visual Studio as an administrator and check the security mode in the configuration and check the targetFramework version in your <httpRuntime> element, as this determines which runtime is actually used by your site.

<bindings> <basicHttpBinding> <binding name="xxxBinding"> <security mode="Transport"> <transport clientCredentialType="Certificate"/> </security> </binding> </basicHttpBinding> </bindings>
Avinash Singh 0 Reputation points

2024-02-16T16:36:27.99+00:00

Thank you for the response. We added these configurations in BasicHttpsBinding before making the call but facing the same issue. Just to add we are able to make this working through .net core 6 in the same machine with the same certificate permissions without any issues. binding.Security.Mode = BasicHttpsSecurityMode.Transport; binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Certificate;
Lan Huang-MSFT 25,556 Reputation points Microsoft Vendor

2024-02-20T07:23:46.97+00:00

Hi @Avinash Singh, Sorry, I can't reproduce your problem. I found a similar situation to yours, maybe you can try the solution mentioned there. https://stackoverflow.com/q/73070505