[Mono-list] HTTPS-connection from CLI running mono-service

Sebastien Pouliot sebastien.pouliot at gmail.com
Mon Oct 22 12:38:14 UTC 2012


Hello,

The first thing to do is to run mozroots. That will install all of
Mozilla's root certificates into Mono store certificates. This is what
Mono uses (i.e. it's own store) everywhere except for OSX, iOS
(MonoTouch) and Android (Mono for Android).

If you want / need to change your own code then please read the [1]
wiki article. That will give you several alternatives including safe
ones.

Sebastien

[1] http://www.mono-project.com/UsingTrustedRootsRespectfully

On Mon, Oct 22, 2012 at 8:28 AM, Nicklas Overgaard <nicklas at isharp.dk> wrote:
> Hi John,
>
> Great!
>
> However, your workaround leaves your service vulnerable to man in the middle
> attacks, as you are regarding ALL ssl certificates as OK. Just something to
> think about, before you go into production.
>
> Best regards
> ---
> Nicklas Overgaard
>
> Founder & Lead Developer
> iSharp Solutions ApS
>
>
>
> On Mon, Oct 22, 2012 at 12:47 PM, JohnK <john.kolle at gmail.com> wrote:
>>
>> Hi
>>
>> I solved the problem by using the work around with creating ...
>>
>> private bool Validator(object sender, X509Certificate certificate,
>> X509Chain
>> chain, SslPolicyErrors sslpolicyErrors)
>> {
>>         return true;
>> }
>>
>> And
>>
>> calling this method from:
>>
>> ServicePointManager.ServerCertificateValidationCallback = Validator;
>>
>> This way of working around the issue can be found here:
>> http://www.mono-project.com/UsingTrustedRootsRespectfully
>>
>>
>>
>>
>>
>> --
>> View this message in context:
>> http://mono.1490590.n4.nabble.com/HTTPS-connection-from-CLI-running-mono-service-tp4657014p4657043.html
>> Sent from the Mono - General mailing list archive at Nabble.com.
>> _______________________________________________
>> Mono-list maillist  -  Mono-list at lists.ximian.com
>> http://lists.ximian.com/mailman/listinfo/mono-list
>
>
>
> _______________________________________________
> Mono-list maillist  -  Mono-list at lists.ximian.com
> http://lists.ximian.com/mailman/listinfo/mono-list
>


More information about the Mono-list mailing list