调用含有header的WebService时，跳过证书验证-白红宇

调用含有header的WebService时，跳过证书验证

阅读量：5321 次

发布时间：2019-06-14

本文共 1206 字，大约阅读时间需要 4 分钟。

　　最近在做Webservice的接口调用，header的用户名和密码都是正确的，地址也是对的，但一直提示：基础连接已关闭，未能与SSL/TLS安全通道建立信任关系。

解决方案：

请求之前加上下面得代码即可，简洁实用

ServicePointManager.ServerCertificateValidationCallback = (sender, certificate, chain, sslPolicyErrors) => true;

ServicePointManager.ServerCertificateValidationCallback = new        RemoteCertificateValidationCallback(   delegate { return true; } );

这样做会潜在一定风险

所有验证都会通过，不论是否证书是无效得。whatever ，还有其他方案？或者针对特定链接这样做就好了

1.This will accept all certificates, regardless of why they are invalid, which resolved the customer’s issue.

By validating the X509 certificate provided by the computer running Microsoft Exchange Server 2007 for SSL over HTTP, you help to provide a layer of security for the client application. You must validate certificates before you can start programming with Exchange Web Services proxy classes. If the callback is not set up, the first call will fail with a certificate error.

2.This solution could be potential security threat as you are turning off the SSL certificate validation. If this is production code, understand the risk of the server you are connecting to.

原文地址:https://www.cnblogs.com/miralce/p/4773037.html

转载于:https://www.cnblogs.com/zyl1994/p/8386594.html

你可能感兴趣的文章