Question 231931 in Visual Studio Code Question posted in
View the official documentation.

Visual Studio Code – Getting error on .Net Core app "The SSL connection could not be established, see inner exception"

I have an ASP.NET Core 7 MVC application. It uses an ASP.NET Core Web API. The application is running fine when both API and UI are running from Visual Studio 2022.

If I deploy the UI, or both UI and API, to IIS using "No Managed Code" application pool, the application throws an error

The SSL connection could not be established, see inner exception
System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: UntrustedRoot at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)

Can anyone assist me in resolving this?

Tags:

2

Answers


  1. Chosen as BEST ANSWER
    0

    Somehow deploying inside Default Web Site on IIS wasn't working. I created a new self signed certificate, deployed both API and UI on the root as a new website with different port for both apps. Enabled https with the newly created self signed certificate on both the applications and it worked.


  2. 0

    The above error message indicates a problem with SSL certificate validation, the SSL certificate used by your application was not recognized as valid because it was signed by an untrusted certificate authority (CA).

    If you are using a self-signed certificate and experiencing SSL verification issues on your local computer, it may be because the certificate is not trusted by default. To resolve this issue, you need to manually add the self-signed certificate to the Trusted Root Certification Authorities store on the local computer. You can try the following steps:

    • Open the Run dialog (Win + R), type mmc, and press Enter.
    • In the MMC window, go to File > Add/Remove Snap-in…
    • Select Certificates from the list of available snap-ins, and click
      Add.
    • Select Computer Account, and click Next.
    • Select Local Computer and click Finish, then click OK to close the
      Add/Remove Snap-in window.
    • Navigate to Certificates (Local Computer) > Trusted Root
      Certification Authorities > Certificates.
    • Right-click in the right pane, select All Tasks, and click Import.
    • Export the self-signed certificate in advance, and then follow the
      wizard to import the self-signed certificate.

    Reference link: Adding the self-signed certificate as trusted

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search