Error SecureChannelFailure, could not create SSL/TLS

Question

I am calling a web service using certifcates and security protocol. The application was running fine but suddenly started giving me web exception.

The request was aborted: Could not create SSL/TLS secure channel.

when I checked status code, it is SecureChannelFailure and HResult is 2146233079. The web service response is returning NULL.

Part of the code is as follows:

ServicePointManager.Expect100Continue = true;
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;

I appreciate any help.

Code and exception format – timbre timbre Jul 14 '16 at 20:20 — timbre timbre, Jul 14 '16 at 20:20

score 1 · Answer 1 · answered Jul 12 '16 at 17:54

A few questions that might point you in the right direction

Maybe the certificate you are using has expired?
Maybe you are running the client from a different computer than before which doesn't have the trusted root of the certificate installed?
Maybe the certificate was somehow revoked?

Hope it helps!

score 0 · Answer 2 · edited Apr 29 '17 at 05:23

0

It worked for me when I added certs like this

X509Store certificatesStore = new X509Store(storeName, storeLocation);
certificatesStore.Open(OpenFlags.OpenExistingOnly);
var matchingCertificates = certificatesStore.Certificates.Find(X509FindType.FindBySerialNumber, serialNumber, true);
request.ClientCertificates.Add(matchingCertificates );

edited Apr 29 '17 at 05:23

Pang

9,564
146
81
122

answered Aug 03 '16 at 18:47

KKG

445
1
6
11

score -1 · Answer 3 · edited May 23 '17 at 10:31

-1

did you get a resolution to this? I've noticed that a windows update to my windows 10 machine and the windows 2008RC servers have caused our issue. The problem we have is that we cannot quickly change the 3rd party servers from SHA1 encrypted certs.

A way around it is to uninstall the updates listed here. https://blogs.windows.com/msedgedev/2016/04/29/sha1-deprecation-roadmap/

Another way around it is to add this line of code:

System.Net.ServicePointManager.ServerCertificateValidationCallback = delegate { return true; };

Ref: Could not establish trust relationship for SSL/TLS secure channel -- SOAP

However this doesn't work for us.

edited May 23 '17 at 10:31

Community

1
1

answered Aug 02 '16 at 14:45

Sniipe

1,116
3
13
28

I also added System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Tls; to my code for debug only because the problem was down to my win 10 updates and the server had different updates. – Sniipe Apr 21 '17 at 09:10

Error SecureChannelFailure, could not create SSL/TLS

3 Answers3