SRV OOS (Win2016 Std) - Cannot Editing : Could not establish trust relationship for the SSL/TLS secure channel.

Question

LOG OOS :

2022-03-01 09:39:28.12 WordViewerWfeWatchdog.exe (0x1578) 0x4880 Hosted Services Infrastructure Services Infrastructure Health adhog Unexpected
Health report by WordViewerWfeWatchdog: Agent: WebWordViewer, eventId: 21425, eventType: Error, categoryId: 1, eventMessage: <?xml version="1.0" encoding="utf-16"?> <HealthReport xmlns:xsd="UREDACTED_(/0DU2HbIHHZ0HNSEMI1i3mayNgT3d0E25Hbd385Xuz8=)" xmlns:xsi="UREDACTED_(vUDd9hxQiPFPu6PoVqaDGh6AcI+AYpXTi8DfuJ1BiX0=)">
<HealthMessage>WordViewerWfeWatchdog reported status for WebWordViewer in category 'WfeRedirect'.
Reported status: Exception when checking /default.aspx: System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. --->
System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result) at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size) at System.Net.ConnectStream.WriteHeaders(Boolean async) --- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.Office.Web.Common.WatchdogHelper.CheckWfeRedirect(ServiceInstance instance, Int16 category, String categoryName)</HealthMessage> <Severity xsi:nil="true" /> </HealthReport> 09897142-59f9-44b2-9df6-174fb4526ae6
2022-03-01 09:39:28.12 WordViewerWfeWatchdog.exe (0x1578) 0x4880 Hosted Services Infrastructure Services Infrastructure Health adhoh Unexpected Health report by WordViewerWfeWatchdog (persistent): Agent: WebWordViewer, eventId: 41425, eventType: Error, categoryId: 1 09897142-59f9-44b2-9df6-174fb4526ae6
2022-03-01 09:39:28.12 WordViewerWfeWatchdog.exe (0x1578) 0x4880 Hosted Services Infrastructure Services Infrastructure Health adhog Unexpected Health report by WordViewerWfeWatchdog: Agent: WebWordViewer, eventId: 21425, eventType: Error, categoryId: 0, eventMessage: <?xml version="1.0" encoding="utf-16"?> <HealthReport xmlns:xsd="UREDACTED_(/0DU2HbIHHZ0HNSEMI1i3mayNgT3d0E25Hbd385Xuz8=)" xmlns:xsi="UREDACTED_(vUDd9hxQiPFPu6PoVqaDGh6AcI+AYpXTi8DfuJ1BiX0=)"> <HealthMessage>WordViewerWfeWatchdog reported status for WebWordViewer in category 'WordViewerFrontEnd'. Reported status: Contacting the ResReader.ashx web handler failed with an exception: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.</HealthMessage> <Severity xsi:nil="true" /> </HealthReport> 09897142-59f9-44b2-9df6-174fb4526ae6
2022-03-01 09:39:28.12 WordViewerWfeWatchdog.exe (0x1578) 0x4880 Hosted Services Infrastructure Services Infrastructure Health adhoh Unexpected Health report by WordViewerWfeWatchdog (persistent): Agent: WebWordViewer, eventId: 41425, eventType: Error, categoryId: 0 09897142-59f9-44b2-9df6-174fb4526ae6
2022-03-01 09:39:28.12 WordViewerWfeWatchdog.exe (0x1578) 0x4880 Hosted Services Infrastructure Services Infrastructure Health adhog Medium Health report by WordViewerWfeWatchdog: Agent: WebWordViewer, eventId: 21425, eventType: Information, categoryId: 2, eventMessage: <?xml version="1.0" encoding="utf-16"?> <HealthReport xmlns:xsd="UREDACTED_(/0DU2HbIHHZ0HNSEMI1i3mayNgT3d0E25Hbd385Xuz8=)" xmlns:xsi="UREDACTED_(vUDd9hxQiPFPu6PoVqaDGh6AcI+AYpXTi8DfuJ1BiX0=)"> <HealthMessage>WordViewerWfeWatchdog reported status for WebWordViewer in category 'MiniCheckAppSettingsHandler'. Reported status: Health check for appsettings.ashx is disabled because feature is disabled by BRS.</HealthMessage> <Severity xsi:nil="true" /> </HealthReport> 09897142-59f9-44b2-9df6-174fb4526ae6

Answer 1

Hi @Raphael Bensoussan (EXT)

System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

The certificate has failed the validation process, normally this means one of the following issues may exist:

1. The client doesn't trust the root of the certificate chain
2. One of the certificate in the certificate chain has expired
3. The common name or SAN don't include the FQDN of the service being accessed

I would check the certificate and certificate chain on the server to ensure that it's valid, and has a name that cover the FQDN of the service, and that the client trusts the root of the certificate chain.

Gary.

Answer 2

Hello GaryReynolds,

thank you for your reply, we have checked and the certificat is OK

2022-03-02 08:43:06.26 Rtc2Watchdog.exe (0x255C) 0x2820 Hosted Services Infrastructure Services Infrastructure Health ardak Medium {"SHTV":"4","Name":"Rtc2Agent#RtcEchoHub","ST":"2022-03-02T08:42:29.7956973Z","ET":"2022-03-02T08:43:06.2447007Z","DT":"00:00:36.4490034","DSK":"Passive","Success":"False","Ver":"16.0.10383.20001","Diag":"Pinging the Echo hub failed with an exception: System.AggregateException: One or more errors occurred. ---\u003e System.Net.Http.HttpRequestException: An error occurred while sending the request. ---\u003e System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---\u003e System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.\r\n at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)\r\n at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)\r\n --- End of inner exception stack trace ---\r\n at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)\r\n at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)\r\n --- End of inner exception stack trace ---\r\n --- End of inner exception stack trace ---\r\n at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)\r\n at System.Threading.Tasks.Task.Wait(I...","SID":"00000000-0000-0000-0000-000000000000","AIID":"b208fb15-6200-431a-9a0c-6639bd7448ce","SHT":"Activity"} dbcbd82e-1e1a-4d83-9981-b66478cedd5c
2022-03-02 08:43:06.26 Rtc2Watchdog.exe (0x255C) 0x2820 Hosted Services Infrastructure Services Infrastructure Health av3b0 Medium Read worst health status setting ("Rtc2WatchdogWorstResultToReport") from configuration store, value = Error dbcbd82e-1e1a-4d83-9981-b66478cedd5c

Answer 3

New LOG :
Microsoft.Office.Web.WebOneNoteWatchdog.exe (0x3A04) 0x46A4 Hosted Office Online OneNote Online Merge Module alwnx Unexpected
Exception while executing OneNoteMergeService Ping check: System.ServiceModel.EndpointNotFoundException:
Il n'existait pas de point de terminaison à l'écoute sur net.pipe://localhost/MergeService pouvant accepter le message.
Ceci est souvent dû à une adresse ou une action SOAP incorrecte.
S'il est présent, voir l'élément InnerException pour plus d'informations. ---> System.IO.PipeException: Le point de terminaison du canal 'net.pipe://localhost/MergeService' est introuvable sur la machine locale.
--- Fin de la trace de la pile d'exception interne --- Server stack trace: à System.ServiceModel.Channels.PipeConnectionInitiator.GetPipeName(Uri uri, IPipeTransportFactorySettings transportFactorySettings)
à System.ServiceModel.Channels.NamedPipeConnectionPoolRegistry.NamedPipeConnectionPool.GetPoolKey(EndpointAddress address, Uri via)
à System.ServiceModel.Channels.CommunicationPool2.TakeConnection(EndpointAddress address, Uri via, TimeSpan timeout, TKey& key) à System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout) à System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout) à System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout) à System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout) à System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout) Exception rethrown at [0]: à System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) à System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) à System.ServiceModel.ICommunicationObject.Open(TimeSpan timeout) à System.ServiceModel.ClientBase1.System.ServiceModel.ICommunicationObject.Open(TimeSpan timeout)
à Microsoft.Office.Web.WebOneNoteWatchdog.OneNoteMergeWatchdog.PingCheck() 979342b0-442d-465d-9792-eff6bef808cc