[Mono-list] HTTPS-connection from CLI running mono-service

Nicklas Overgaard nicklas at isharp.dk
Mon Oct 22 12:28:26 UTC 2012


Hi John,

Great!

However, your workaround leaves your service vulnerable to man in the
middle attacks, as you are regarding ALL ssl certificates as OK. Just
something to think about, before you go into production.

Best regards
---
Nicklas Overgaard

Founder & Lead Developer
iSharp Solutions ApS



On Mon, Oct 22, 2012 at 12:47 PM, JohnK <john.kolle at gmail.com> wrote:

> Hi
>
> I solved the problem by using the work around with creating ...
>
> private bool Validator(object sender, X509Certificate certificate,
> X509Chain
> chain, SslPolicyErrors sslpolicyErrors)
> {
>         return true;
> }
>
> And
>
> calling this method from:
>
> ServicePointManager.ServerCertificateValidationCallback = Validator;
>
> This way of working around the issue can be found here:
> http://www.mono-project.com/UsingTrustedRootsRespectfully
>
>
>
>
>
> --
> View this message in context:
> http://mono.1490590.n4.nabble.com/HTTPS-connection-from-CLI-running-mono-service-tp4657014p4657043.html
> Sent from the Mono - General mailing list archive at Nabble.com.
> _______________________________________________
> Mono-list maillist  -  Mono-list at lists.ximian.com
> http://lists.ximian.com/mailman/listinfo/mono-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-list/attachments/20121022/8e5a1b7a/attachment.html>


More information about the Mono-list mailing list