zoukankan      html  css  js  c++  java
  • D365 FO第三方访问https证书问题

     D365FO采用https,第三方通过API调用的时候,客户端不见得信任D365FO的证书,调用时候会报
    基础连接已关闭,发送时发生错误,调用堆栈如下:

     1    at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
     2    at System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)
     3    at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
     4    at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
     5    at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
     6    at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
     7    at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
     8    at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
     9    at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
    10    at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
    11    at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
    12    at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
    13    at System.Net.ConnectStream.WriteHeaders(Boolean async)

    从调用堆栈看,应该是跟SSL验证有关系。
    当然有时候还会直接报
    基础连接已经关闭: 未能为 SSL/TLS 安全通道建立信任关系
    这个就更直接了。
    网上有很多解决办法,目的是让https请求跳过客户端对SSL证书的验证。

    1 ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
    2             ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(
    3                 (object caller,
    4                 X509Certificate certifacate,
    5                 X509Chain chain,
    6                 SslPolicyErrors erros) => { return true; });            
    7             var request = HttpWebRequest.Create(url);

    这段代码一定要放到HttpWebRequest之前,要不然回调的时候调不到方法。
    ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
    这一句也是必须的,D365的协议版本是Tls12,指定别的版本也不会跳过检查。

  • 相关阅读:
    常用品牌交换机镜像抓包配置
    BGP知识点备忘录
    IS-IS路由协议地址详解
    Linux msmtp+mutt发邮件
    Linux添加一临时用户拥有root权限最快方式
    ELK5.0全程普通用户源码安装指南(CentOS6.5)
    改变文件的拥有者和改变文件的拥有组
    Linux chmod命令详解
    Linux目录介绍
    php时间戳转化成时间相差8小时问题
  • 原文地址:https://www.cnblogs.com/Farseer1215/p/13158112.html
Copyright © 2011-2022 走看看