Unable to communicate with SSL Web Service using X509 Client Cert

Discussion in 'ASP .Net Web Services' started by gardavis, Jul 2, 2004.

  1. gardavis

    gardavis Guest

    This is one of those cases where it works (calling the Web Service) in a WinForm app but not in ASP.Net.

    I am attempting to call a PayPal Web Service. I got the client certificate from them.

    The certificate works in the WinForm app but the same code in ASP.Net fails.

    I click the submit button an about a minute or so, this trap occurred:

    Web Exception: System.Net.WebException: The underlying connection was closed: Could not establish secure channel for SSL/TLS. ---> System.IO.IOException: Unable to read data from the transport connection. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host

    A second (and third...) attempt also produces a trap but a bit different and it occurs immediatly, not after a delay like the one above.


    Web Exception: System.Net.WebException: The underlying connection was closed: Could not establish secure channel for SSL/TLS. ---> System.ComponentModel.Win32Exception: The message received was unexpected or badly formatted

    In order to see the warnings from SCHANNEL in the event log, I changed the EventLogging from 1 to 7 using regedit:

    KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNELEventLogging = 7

    I repeated the failing request and checked the "System" section in the Event Log:

    Event Type: Warning
    Event Source: Schannel
    Event Category: None
    Event ID: 36875
    User: N/A

    Description:The remote server has requested SSL client authentication, but no suitable client certificate could be found. An anonymous connection will be attempted. This SSL connection request may succeed or fail, depending on the server's policy settings.

    This message seems to say that the PayPal Web Service has requested the certificate but my server could not find one to return

    Thanks for any help!

    Gary
     
    gardavis, Jul 2, 2004
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. David Chan via .NET 247
    Replies:
    1
    Views:
    348
    Dominick Baier [DevelopMentor]
    Jun 2, 2005
  2. Keyset does not exist X509Certificate

    Keyset does not exist at Microsoft.Web.Services.Security.X509.X509

    Keyset does not exist X509Certificate, Jun 12, 2004, in forum: ASP .Net Web Services
    Replies:
    0
    Views:
    207
    Keyset does not exist X509Certificate
    Jun 12, 2004
  3. Bat'on

    Websevice secured with X509 cert (ssl)

    Bat'on, Feb 2, 2005, in forum: ASP .Net Web Services
    Replies:
    2
    Views:
    127
    JerryK
    Mar 9, 2005
  4. charlief1975

    Consuming a secure webservice using x509 cert (p12)

    charlief1975, May 19, 2005, in forum: ASP .Net Web Services
    Replies:
    0
    Views:
    164
    charlief1975
    May 19, 2005
  5. marc spitzer

    How do I decode/parse a X509 SSL Cert

    marc spitzer, Sep 3, 2009, in forum: Ruby
    Replies:
    2
    Views:
    229
    yermej
    Sep 4, 2009
Loading...

Share This Page