Question

是否可以指定通过WSHttpBinding使用Web服务时要使用的SSL协议版本？

我一直在使用跟踪日志来尝试确定我使用客户端证书通过SSL调用Web服务失败的原因。

最终日志记录显示警报15 03 01 00 02和警报代码02 0A，这是一个unexpected_error。我怀疑这个错误是因为服务器无法处理我正在抛出的SSL版本。

System.Net.Sockets Verbose: 0 : [13908] Exiting Socket#15927457::Send()     -> Int32#138
System.Net.Sockets Verbose: 0 : [13908] Socket#15927457::Receive()
System.Net.Sockets Verbose: 0 : [13908] Data from Socket#15927457::Receive
System.Net.Sockets Verbose: 0 : [13908] 00000000 : 15 03 01 00 02                                  : .....
System.Net.Sockets Verbose: 0 : [13908] Exiting Socket#15927457::Receive()  -> Int32#5
System.Net.Sockets Verbose: 0 : [13908] Socket#15927457::Receive()
System.Net.Sockets Verbose: 0 : [13908] Data from Socket#15927457::Receive
System.Net.Sockets Verbose: 0 : [13908] 00000005 : 02 0A                                           : ..
System.Net.Sockets Verbose: 0 : [13908] Exiting Socket#15927457::Receive()  -> Int32#2
System.Net Information: 0 : [13908] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 79d80e8:7a0e230, targetName = dsl-wholesale-testing.iinet.net.au, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation)
System.Net Information: 0 : [13908] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=IllegalMessage).
System.Net.Sockets Verbose: 0 : [13908] Socket#15927457::Dispose()
System.Net Error: 0 : [13908] Exception in HttpWebRequest#41613110:: - The request was aborted: Could not create SSL/TLS secure channel..
System.Net Error: 0 : [13908] Exception in HttpWebRequest#41613110::GetResponse - The request was aborted: Could not create SSL/TLS secure channel..

我有一个基于PHP的客户端可以使用相同的Web服务，我通过cURL（curl_setopt($ch, CURLOPT_SSLVERSION, 3);）指定SSL版本3.

Answer 1

版本可以设置如下：

System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Ssl3;

指定用于WSHttpBinding客户端连接的SSL协议版本

1 个答案: