473,545 Members | 666 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

C#.NET Application - Could not establish secure channel for SSL/TL

I'm running a C#.Net application that is using the HttpWebRequest to upload
an xml file to a https site with FIPS complicancy turned on. On the
"GetRequestStre am()" method I get:

"The underlying connection was closed: Could not establish secure channel
for SSL/TLS."

With FIPS turned on the secure website, only a FIPS compliant protocol can
be used. Since SSL is not FIPS compliant then only TLS can be used.
Unfortunately, this protocol is not supported in .Net Framework 1.1.
I then tried recompileing my C#.Net program in Visual Studio 2005. It
mentioned that the .NET Framework 2.0 supprted the TLS protocol. When running
the application, I encountered the same problem. Has anyone found a solution
to this problem?

--
Bill Larson
Nov 19 '05 #1
3 4155
Hi Bill,

Welcome to ASPNET newsgroup.
Regarding on the SSL/TLS connection establishing problem, it is really an
existing problem in the .NET framework implementation of the WEBRequest
component. Actually the problem is quite hard to say who has done the
thing wrong. The .net framework's webrequest component address the https
connection and for which currently SSL is widely used though TLS is the
latest standard. Anyway, I've found the following workaround form some
former cases on this problem:

In our code add the below statement before creating and using the
webrequest components....
System.Net.Serv icePointManager .SecurityProtoc ol = SecurityProtoco lType.Tls;
Namespace: System.Net

It will force TLS 1.0 instead of SSL V3.

Hope helps. Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)


--------------------
| Thread-Topic: C#.NET Application - Could not establish secure channel for
SSL/TL
| thread-index: AcXf/si25gClDMRqTjaA VogbgA8GCA==
| X-WBNR-Posting-Host: 158.15.248.140
| From: "=?Utf-8?B?QmlsbA==?=" <Ke**@community .nospam>
| Subject: C#.NET Application - Could not establish secure channel for
SSL/TL
| Date: Wed, 2 Nov 2005 14:43:03 -0800
| Lines: 17
| Message-ID: <2A************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.p hx.gbl!TK2MSFTN GXA03.phx.gbl
| Xref: TK2MSFTNGXA01.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:1356 59
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| I'm running a C#.Net application that is using the HttpWebRequest to
upload
| an xml file to a https site with FIPS complicancy turned on. On the
| "GetRequestStre am()" method I get:
|
| "The underlying connection was closed: Could not establish secure channel
| for SSL/TLS."
|
| With FIPS turned on the secure website, only a FIPS compliant protocol
can
| be used. Since SSL is not FIPS compliant then only TLS can be used.
| Unfortunately, this protocol is not supported in .Net Framework 1.1.
| I then tried recompileing my C#.Net program in Visual Studio 2005. It
| mentioned that the .NET Framework 2.0 supprted the TLS protocol. When
running
| the application, I encountered the same problem. Has anyone found a
solution
| to this problem?
|
| --
| Bill Larson
|

Nov 19 '05 #2
It worked. Thanks!
--
Bill Larson
"Steven Cheng[MSFT]" wrote:
Hi Bill,

Welcome to ASPNET newsgroup.
Regarding on the SSL/TLS connection establishing problem, it is really an
existing problem in the .NET framework implementation of the WEBRequest
component. Actually the problem is quite hard to say who has done the
thing wrong. The .net framework's webrequest component address the https
connection and for which currently SSL is widely used though TLS is the
latest standard. Anyway, I've found the following workaround form some
former cases on this problem:

In our code add the below statement before creating and using the
webrequest components....
System.Net.Serv icePointManager .SecurityProtoc ol = SecurityProtoco lType.Tls;
Namespace: System.Net

It will force TLS 1.0 instead of SSL V3.

Hope helps. Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)


--------------------
| Thread-Topic: C#.NET Application - Could not establish secure channel for
SSL/TL
| thread-index: AcXf/si25gClDMRqTjaA VogbgA8GCA==
| X-WBNR-Posting-Host: 158.15.248.140
| From: "=?Utf-8?B?QmlsbA==?=" <Ke**@community .nospam>
| Subject: C#.NET Application - Could not establish secure channel for
SSL/TL
| Date: Wed, 2 Nov 2005 14:43:03 -0800
| Lines: 17
| Message-ID: <2A************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.p hx.gbl!TK2MSFTN GXA03.phx.gbl
| Xref: TK2MSFTNGXA01.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:1356 59
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| I'm running a C#.Net application that is using the HttpWebRequest to
upload
| an xml file to a https site with FIPS complicancy turned on. On the
| "GetRequestStre am()" method I get:
|
| "The underlying connection was closed: Could not establish secure channel
| for SSL/TLS."
|
| With FIPS turned on the secure website, only a FIPS compliant protocol
can
| be used. Since SSL is not FIPS compliant then only TLS can be used.
| Unfortunately, this protocol is not supported in .Net Framework 1.1.
| I then tried recompileing my C#.Net program in Visual Studio 2005. It
| mentioned that the .NET Framework 2.0 supprted the TLS protocol. When
running
| the application, I encountered the same problem. Has anyone found a
solution
| to this problem?
|
| --
| Bill Larson
|

Nov 19 '05 #3
You're welcome Bill,

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
--------------------
| Thread-Topic: C#.NET Application - Could not establish secure channel for
SS
| thread-index: AcXgiM1pEBrK8wP fT8W0AUqywxpjtg ==
| X-WBNR-Posting-Host: 158.15.248.140
| From: "=?Utf-8?B?QmlsbA==?=" <Ke**@community .nospam>
| References: <2A************ *************** *******@microso ft.com>
<iV************ **@TK2MSFTNGXA0 1.phx.gbl>
| Subject: RE: C#.NET Application - Could not establish secure channel for
SS
| Date: Thu, 3 Nov 2005 07:11:01 -0800
| Lines: 90
| Message-ID: <06************ *************** *******@microso ft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.p hx.gbl!TK2MSFTN GXA03.phx.gbl
| Xref: TK2MSFTNGXA01.p hx.gbl
microsoft.publi c.dotnet.framew ork.aspnet:1358 25
| X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
|
| It worked. Thanks!
| --
| Bill Larson
|
|
| "Steven Cheng[MSFT]" wrote:
|
| > Hi Bill,
| >
| > Welcome to ASPNET newsgroup.
| > Regarding on the SSL/TLS connection establishing problem, it is really
an
| > existing problem in the .NET framework implementation of the WEBRequest
| > component. Actually the problem is quite hard to say who has done the
| > thing wrong. The .net framework's webrequest component address the
https
| > connection and for which currently SSL is widely used though TLS is the
| > latest standard. Anyway, I've found the following workaround form some
| > former cases on this problem:
| >
| > In our code add the below statement before creating and using the
| > webrequest components....
| >
| >
| > System.Net.Serv icePointManager .SecurityProtoc ol =
SecurityProtoco lType.Tls;
| > Namespace: System.Net
| >
| > It will force TLS 1.0 instead of SSL V3.
| >
| > Hope helps. Thanks,
| >
| > Steven Cheng
| > Microsoft Online Support
| >
| > Get Secure! www.microsoft.com/security
| > (This posting is provided "AS IS", with no warranties, and confers no
| > rights.)
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: C#.NET Application - Could not establish secure channel
for
| > SSL/TL
| > | thread-index: AcXf/si25gClDMRqTjaA VogbgA8GCA==
| > | X-WBNR-Posting-Host: 158.15.248.140
| > | From: "=?Utf-8?B?QmlsbA==?=" <Ke**@community .nospam>
| > | Subject: C#.NET Application - Could not establish secure channel for
| > SSL/TL
| > | Date: Wed, 2 Nov 2005 14:43:03 -0800
| > | Lines: 17
| > | Message-ID: <2A************ *************** *******@microso ft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
| > | NNTP-Posting-Host: TK2MSFTNGXA03.p hx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.p hx.gbl!TK2MSFTN GXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.p hx.gbl
| > microsoft.publi c.dotnet.framew ork.aspnet:1356 59
| > | X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet
| > |
| > | I'm running a C#.Net application that is using the HttpWebRequest to
| > upload
| > | an xml file to a https site with FIPS complicancy turned on. On the
| > | "GetRequestStre am()" method I get:
| > |
| > | "The underlying connection was closed: Could not establish secure
channel
| > | for SSL/TLS."
| > |
| > | With FIPS turned on the secure website, only a FIPS compliant
protocol
| > can
| > | be used. Since SSL is not FIPS compliant then only TLS can be used.
| > | Unfortunately, this protocol is not supported in .Net Framework 1.1.
| > | I then tried recompileing my C#.Net program in Visual Studio 2005. It
| > | mentioned that the .NET Framework 2.0 supprted the TLS protocol. When
| > running
| > | the application, I encountered the same problem. Has anyone found a
| > solution
| > | to this problem?
| > |
| > | --
| > | Bill Larson
| > |
| >
| >
|

Nov 19 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

11
2748
by: Timothy Shih | last post by:
Hi, I am having a freezing issue with my application. My application serves several remotable objects, all of which must be initialized before their use. Furthermore, some of them depend on each other. On my application startup, I configure the objects usting the RemotingConfiguration class to load the config file. Then I "ping" each of the...
1
6063
by: C.W. | last post by:
I am trying to connect to a remote server in order to perform an http post inside my asp.net page. However, I consistently get the following error: System.Net.Sockets.Socket.Receive(Byte buffer, Int32 offset, Int32 size, SocketFlags socketFlags) System.Net.Sockets.NetworkStream.Read(Byte buffer, Int32 offset, Int32 size)
4
15478
by: konsu | last post by:
hello, my client code communicates with a web service through a https connection. the code has a stub derived from SoapHttpClientProtocol. It also sets a certificate policy handler that allows everything: class CertificatePolicy : ICertificatePolicy { public bool CheckValidationResult(ServicePoint servicepoint, X509Certificate...
1
8311
by: Mark Richards | last post by:
Hi, I am interfacing with another company using web services (they are a java shop). We've been doing this for over 2 years, but a couple months age we started getting this error randomly. It started getting more frequent, so I re-wrote the code from ASP to ASP.Net. The problem still continues. It appears that the problem happens most...
1
9705
by: Rob Thompson | last post by:
Hi, We are using web services that are secured using SSL, everything works fine, but every now and then we get an error: >>START<< System.Net.WebException: The underlying connection was closed: Could not establish secure channel for SSL/TLS. ---> System.IO.IOException: Unable to read data from the transport connection. --->...
0
1389
by: Ryan Michela | last post by:
Hello all, I am trying to access our SOAP web service over an HTTPS connection and am getting the infamous "Could not establish secure channel for SSL/TLS" error. The client program works at all but two of our stations so that rules out certificate problems. Some of our stations have proxies and some with proxies work fine when the web...
0
4044
by: daryl | last post by:
I have a situation where a webservice has worked fine in a development environment, but when placed into production has stopped working (although at one time it was). Using WSE 2.0/DIME, we wrote a simple File Transfer and retrieval service, which has to pass through a firewall (the only real difference between dev and production -- at the...
0
1064
by: Nathan Alden | last post by:
This error will appear intermittently and seemingly for no reason when my Web service tries to contact another Web service over the Internet using SSL. I'd say about 80-90% of all the requests work without a problem. The last 10-20% result in timeouts or this "Could not establish secure channel for SSL/TLS" message. I'm sure many of you...
7
3687
by: Jim Butler | last post by:
I have this error that is happening on all of our web servers (production included). It basically started occurring once we loaded 2005 sql client tools, asp.net 2.0 (and all related prerequistes) on our windows 2003 web servers (unfortunately they are needed, so uninstalling is not an option). The web app where this happens, runs both asp...
0
7467
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main...
0
7401
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language...
1
7419
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For...
0
5971
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then...
1
5326
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes...
0
4944
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert...
0
3450
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in...
0
3442
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
1014
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.