IIS--部署https服务报 the certificate chain: UntrustedRoot 错误

原创已于 2023-12-19 22:00:44 修改 · 1.6k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#https

于 2022-09-08 11:22:07 首次发布

iis 专栏收录该内容

15 篇文章

订阅专栏

这篇博客主要介绍了在遇到系统抛出的`InvalidOperationException`和`IOException`，特别是报错信息中包含'errorsinthecertificatechain:UntrustedRoot'时，如何诊断和解决SSL连接无法建立的问题。解决方案是删除证书管理器中不信任的根证书，然后重新安装证书文件，确保证书链的完整性和可信度。

一、问题描述

报错信息如下：

System.InvalidOperationException: IDX20803: Unable to obtain configuration from: 'System.String'.\r\n ---> System.IO.IOException: IDX20804: Unable to retrieve document from: 'System.String'.
 ---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
  ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: UntrustedRoot
  at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
    at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
     at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
      --- End of inner exception stack trace ---\r\n at