The remote certificate is invalid according to the validation procedure

15 篇文章 0 订阅

If you get “The remote certificate is invalid according to the validation procedure” exception while trying to establish SSL connection, most likely your’s server certificate is self-signed or you used incorrect host name to connect (Host name must match the name on certificate, for example ftp.example.com and example.com may point to the same server, but certificate is issued only to ftp.example.com and this is the address you should use).

Good news is that you can accept self-signed certificates using Ftp.dll FTP and FTPS .NET component.

First you need to subscribe to ServerCertificateValidate event.

Then you need to create ValidateCertificate method that validates the certificate (ignores certificate chain and name mismatch errors).

// C# version

using (Ftp client = new Ftp())
{
    // we will use custom validation
    client.ServerCertificateValidate +=
        new ServerCertificateValidateEventHandler(Validate);

    // Minimalistic version to accept any certificate:
    //client.ServerCertificateValidate += 
    //    (sender, e) => { e.IsValid = true; };

    client.ConnectSSL("ftp.example.org");
    client.Login("username", "password");

    foreach (FtpItem item in client.GetList())
    {
        if (item.IsFolder == true)
            Console.WriteLine("[{0}]", item.Name);
        else
            Console.WriteLine"{0}", item.Name);
    }
    client.Close();
}

private static void ValidateCertificate(
    object sender,
    ServerCertificateValidateEventArgs e)
{
    const SslPolicyErrors ignoredErrors =
        SslPolicyErrors.RemoteCertificateChainErrors |  // self-signed
        SslPolicyErrors.RemoteCertificateNameMismatch;  // name mismatch

    if ((e.SslPolicyErrors & ~ignoredErrors) == SslPolicyErrors.None)
    {
        e.IsValid = true;
        return;
    }
    e.IsValid = false;
}

You can  download Ftp.dll FTP/FTPS component for .NET here .



您好!对于您遇到的问题,出现 "The SSL connection could not be established, see inner exception. The remote certificate is invalid" 错误消息通常表示 SSL 证书无效导致无法建立安全连接。 出现此错误的原因可能有几种: 1. 证书过期或无效:请确保远程服务器的 SSL 证书是有效的,并且其颁发机构受信任。可以使用浏览器或命令行工具(如 OpenSSL)检查证书的有效性。 2. 证书链不完整:有时,服务器可能未正确配置 SSL 证书链。这可能会导致客户端无法验证服务器的证书。您可以尝试手动将证书链添加到代码中,以确保完整性。 3. 代理配置问题:如果您使用代理进行网络连接,可能是代理配置问题导致 SSL 连接失败。请确保代理配置正确,并且代理服务器也可以正确处理 SSL 连接。 解决此问题的一种方法是在 .NET Core 代码中禁用 SSL 证书验证,这样可以绕过证书验证错误。但这只是权宜之计,并不建议在生产环境中使用。以下是一个示例代码片段,用于禁用证书验证: ```csharp using System; using System.Net.Http; using System.Net.Http.Headers; using System.Net.Security; using System.Security.Cryptography.X509Certificates; // 创建 HttpClientHandler 实例,并设置 ServerCertificateCustomValidationCallback var handler = new HttpClientHandler(); handler.ServerCertificateCustomValidationCallback = (sender, cert, chain, sslPolicyErrors) => true; // 创建 HttpClient 实例,使用上面创建的 handler var client = new HttpClient(handler); // 发送请求 var response = await client.GetAsync("https://example.com"); ``` 请注意,禁用证书验证可能会带来安全风险,请在了解风险的情况下谨慎使用。 希望这些信息能对您有所帮助!如果您有任何其他问题,请随时提问。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值