C# https证书通信Post/Get（解决做ssl通道时遇到“请求被中止: 未能创建 SSL/TLS 安全通道”问题）

        public static string HttpPost(string url, string param = null)
        {
            HttpWebRequest request;

            //如果是发送HTTPS请求  
            if (url.StartsWith("https", StringComparison.OrdinalIgnoreCase))
            {
                ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;   //协议按需选择，
                ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(CheckValidationResult);
                request = WebRequest.Create(url) as HttpWebRequest;
                request.ProtocolVersion = HttpVersion.Version10;

            }
            else
            {
                request = WebRequest.Create(url) as HttpWebRequest;
            }

            request.Method = "POST";
            request.ContentType = "application/json";
            request.Accept = "*/*";
            request.Timeout = 15000;  
            request.AllowAutoRedirect = false;
            //查找我们导入的证书
            X509Store certStore = new X509Store(StoreName.My, StoreLocation.LocalMachine);
            certStore.Open(OpenFlags.ReadOnly);
            var aa = certStore.Certificates;
            X509Certificate2Collection certCollection = certStore.Certificates.Find(X509FindType.FindBySubjectName, "www.xxx.com", false);
            request.ClientCertificates.Add(certCollection[0]);


            StreamWriter requestStream = null;
            WebResponse response = null;
            string responseStr = null;

            try
            {
                requestStream = new StreamWriter(request.GetRequestStream());
                requestStream.Write(param);
                requestStream.Close();

                response = request.GetResponse();
                if (response != null)
                {
                    StreamReader reader = new StreamReader(response.GetResponseStream(), Encoding.UTF8);
                    responseStr = reader.ReadToEnd();
                    reader.Close();
                }
            }
            catch (Exception)
            {
                throw;
            }
            finally
            {
                request = null;
                requestStream = null;
                response = null;
            }

            return responseStr;
        }


        private static bool CheckValidationResult(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
        {
            return true; //总是接受  
        } 

第一步导入证书：

a、运行输入“mmc”

 b、在控制台中点击“文件”——>“添加/删除管理单元”，在弹出框中依次选择“证书”-“添加”-“”-“确定”

上图点击“添加”弹出框选择“计算机账户”，一直下一步到完成。

c、证书导入，“证书”右键 选择“所有任务”，点击“导入“。

 d、证书授权

 1、工具下载 安装winhttpcertcfg.msi 下载地址 https://www.microsoft.com/en-us/download/details.aspx?id=19801。

 2、到winhttpcertcfg安装目录运行如下命令提升账户访问权限：WinHttpCertCfg.exe -g -c LOCAL_MACHINEMY -s "证书名" -a  "NETWORK SERVICE"。

      说明：-s  证书名（如：www.xxxx.com） ；-a 授权用户

 3、如果你的IIS是7.0，需要设置网站应用池标识（如图）。

4、重启IIS