WebRequest 创建https协议时 调用 GetRequestStream 报错

[gavinluo]

环境是 Windows 2008 R2 , IIS7.5
问题:
WebRequest 创建https请求时 调用 GetRequestStream 报错
The request was aborted: Could not create SSL/TLS secure channel. at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
at System.Net.HttpWebRequest.GetRequestStream()

原因分析: IIS_IUser 权限不足 , GetRequestStream的时候需要访问证书?

解决办法: 设置应用程序池的标识为 localSystem. 但这个方法安全会有隐患.

不知道大家有好的方案没?

[编程有钱人了]

你访问的是HTTPS 网站，同样的问题也困扰我了，服务器注意开启443端口 下面试 paypal的是个例子

 ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
                     string actionAddress = "https://www.paypal.com/cgi-bin/webscr";
            System.Net.HttpWebRequest req = (HttpWebRequest)WebRequest.Create(actionAddress);
            req.Method = "POST";
            req.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(delegate { return true; });

            req.ContentType = "application/x-www-form-urlencoded";
            byte[] param = Request.BinaryRead(Request.ContentLength);
            string strFormValues = Encoding.ASCII.GetString(param);

ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12; 和 req.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(delegate { return true; }); 比较重要

[exception92]

参见：https://stackoverflow.com/questions/2859790/the-request-was-aborted-could-not-create-ssl-tls-secure-channel

[by_封爱]

           if (url.StartsWith("https", StringComparison.OrdinalIgnoreCase))
            {
                ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(CheckValidationResult);
                request = WebRequest.Create(url) as HttpWebRequest;
                request.ProtocolVersion = HttpVersion.Version11;
            }
            else
            {
                request = WebRequest.Create(url) as HttpWebRequest;
            }

 private static bool CheckValidationResult(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
        {
            return true; 
        }

其他都一样 没什么区别.. 请求过https的 没问题,.