问题描述
我将Web服务部署到安全服务器，当我尝试将该服务的Web引用添加到桌面应用程序时，找到该服务并在 添加Web引用 对话框（它显示服务的名称和所有公开的方法），但是我收到此错误并且无法添加引用（该按钮被禁用）：
I deployed a web service to a secure server, and when I try to add a web reference to that service to a desktop app, the service is found and I get the expected output on the left side of the Add Web Reference dialog box (it shows the name of the service and all of the exposed methods), but I get this error and can't add the reference (the button is disabled):
There was an error downloading 'https://blah.blah/blah/service1.asmx'.<br />
The request was aborted: Could not create SSL/TLS secure channel.<br />
There was an error downloading 'https://blah.blah/blah/service1.asmx/$metadata'.<br />
The request was aborted: Could not create SSL/TLS secure channel.
我在谷歌上发现它可能是由过期的根证书引起的，但有问题的服务器有超过300个根证书。如何找出IIS正在使用哪个根证书，如果它已过期，如何修改IIS以使用未过期的那个？
提供完整信息的兴趣，托管服务的网站通过使用CAC卡来验证用户（这是国防部的事情）。我认为这是X509的事情。
I found on google that it might be caused by an expired root certificate, but the server in question has over 300 root certificates. How do I find out which root certificate is being used by IIS, and if it's expired, how to modify IIS to use one that ISN'T expired?
In the interest of providing complete info, the web site under which the service is hosted autheticates the user by using a CAC card (it's a DoD thing). I believe that's a X509 thing.
推荐答案
我在google上发现它可能是由过期的根证书引起的，但有问题的服务器有超过300个根证书。如何找出IIS正在使用哪个根证书，如果它已过期，如何修改IIS以使用未过期的那个？
提供完整信息的兴趣，托管服务的网站通过使用CAC卡来验证用户（这是国防部的事情）。我相信这是X509的事。
I found on google that it might be caused by an expired root certificate, but the server in question has over 300 root certificates. How do I find out which root certificate is being used by IIS, and if it's expired, how to modify IIS to use one that ISN'T expired?
In the interest of providing complete info, the web site under which the service is hosted autheticates the user by using a CAC card (it's a DoD thing). I believe that's a X509 thing.
这篇关于安全Web服务 - 无法创建SSL / TLS安全通道的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！