The remote certificate is invalid according to the validation procedure

最新推荐文章于 2024-07-05 13:34:16 发布

转载最新推荐文章于 2024-07-05 13:34:16 发布 · 6.3k 阅读

C# 同时被 2 个专栏收录

270 篇文章

订阅专栏

服务器

15 篇文章

订阅专栏

本文介绍了解决尝试建立SSL连接时遇到的“远程证书根据验证程序无效”异常的方法。通常这种问题源于服务器证书为自签名或主机名与证书名称不匹配。文章提供了使用Ftp.dll FTP和FTPS.NET组件接受自签名证书的C#示例代码。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

If you get “The remote certificate is invalid according to the validation procedure” exception while trying to establish SSL connection, most likely your’s server certificate is self-signed or you used incorrect host name to connect (Host name must match the name on certificate, for example ftp.example.com and example.com may point to the same server, but certificate is issued only to ftp.example.com and this is the address you should use).

Good news is that you can accept self-signed certificates using Ftp.dll FTP and FTPS .NET component.

First you need to subscribe to ServerCertificateValidate event.

Then you need to create ValidateCertificate method that validates the certificate (ignores certificate chain and name mismatch errors).

// C# version

using (Ftp client = new Ftp())
{
    // we will use custom validation
    client.ServerCertificateValidate +=
        new ServerCertificateValidateEventHandler(Validate);

    // Minimalistic version to accept any certificate:
    //client.ServerCertificateValidate += 
    //    (sender, e) => { e.IsValid = true; };

    client.ConnectSSL("ftp.example.org");
    client.Login("username", "password");

    foreach (FtpItem item in client.GetList())
    {
        if (item.IsFolder == true)
            Console.WriteLine("[{0}]", item.Name);
        else
            Console.WriteLine"{0}", item.Name);
    }
    client.Close();
}

private static void ValidateCertificate(
    object sender,
    ServerCertificateValidateEventArgs e)
{
    const SslPolicyErrors ignoredErrors =
        SslPolicyErrors.RemoteCertificateChainErrors |  // self-signed
        SslPolicyErrors.RemoteCertificateNameMismatch;  // name mismatch

    if ((e.SslPolicyErrors & ~ignoredErrors) == SslPolicyErrors.None)
    {
        e.IsValid = true;
        return;
    }
    e.IsValid = false;
}

You can download Ftp.dll FTP/FTPS component for .NET here .