如何使用c#2.0 WebClient忽略证书错误 - 没有证书

简而言之，以上代码信任任何人，并绕过所有SSL验证，因此不安全。 (2认同)

Adam Plocher.. 12

我意识到这是一个老帖子,但我只是想表明有更简洁的方法(使用.NET 3.5+及更高版本).

也许这只是我的OCD,但我希望尽可能地减少这些代码.这似乎是最简单的方法,但我还列出了一些更长的等价物:

// 79 Characters (72 without spaces)
ServicePointManager.ServerCertificateValidationCallback = (a, b, c, d) => true;

.NET 2.0中的最短路径(这个问题是专门询问的)

// 84 Characters
ServicePointManager.ServerCertificateValidationCallback = delegate { return true; };

不幸的是,lambda方式要求你定义参数,否则它可能更短.

如果你需要更长的路,这里有一些额外的选择:

ServicePointManager.ServerCertificateValidationCallback = (sender, cert, chain, errors) => true;

ServicePointManager.ServerCertificateValidationCallback = delegate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors) { return true; };

// 255 characters - lots of code!
ServicePointManager.ServerCertificateValidationCallback =
    new RemoteCertificateValidationCallback(
        delegate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
        {
            return true;
        });

Jaxidian.. 9

这有点像我们正在使用的代码(尚未抛光 - 我认为我没有正确的错误处理设置,但它应该接近)基于托马斯的建议(这是.NET 4.0代码):

var sslFailureCallback = new RemoteCertificateValidationCallback(delegate { return true; });

try
{

    if (ignoreSslErrors)
    {
        ServicePointManager.ServerCertificateValidationCallback += sslFailureCallback;
    }

    response = webClient.UploadData(Options.Address, "POST", Encoding.ASCII.GetBytes(Options.PostData));

}
catch (Exception err)
{
    PageSource = "POST Failed:\r\n\r\n" + err;
    return PageSource;
}
finally
{
    if (ignoreSslErrors)
    {
        ServicePointManager.ServerCertificateValidationCallback -= sslFailureCallback;
    }
}

小智.. 8

此代码比您预期的要广泛得多.这是整个过程.该进程可能是此计算机上的exe,IIS,甚至DLLHost.exe.调用它之后,有一个finally块,通过删除总是返回true的委托来恢复正常.

SSL证书用于机器建立信任关系.如果您键入一个IP地址,并最终与另一个IP地址通话,这听起来与DNS劫持安全性故障相同,那就是SSL打算帮助您避免的事情 - 也许您不想忍受的事情从他们".

如果您最终可能与机器进行交谈(理想情况下,它们会使其显示为一个机器),您将需要为每个可能的机器提供证书以启动信任.

要忽略信任(我只需要在开发方案中暂时执行此操作),以下代码段可能对您有用,但我强烈建议您在使用之前考虑忽略信任的影响:

public static void InitiateSSLTrust()
{
    try
    {
        //Change SSL checks so that all checks pass
        ServicePointManager.ServerCertificateValidationCallback =
           new RemoteCertificateValidationCallback(
                delegate
                { return true; }
            );
    }
    catch (Exception ex)
    {
        ActivityLog.InsertSyncActivity(ex);
    }
}

// 79 Characters (72 without spaces)
ServicePointManager.ServerCertificateValidationCallback = (a, b, c, d) => true;

// 84 Characters
ServicePointManager.ServerCertificateValidationCallback = delegate { return true; };

ServicePointManager.ServerCertificateValidationCallback = (sender, cert, chain, errors) => true;

ServicePointManager.ServerCertificateValidationCallback = delegate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors) { return true; };

// 255 characters - lots of code!
ServicePointManager.ServerCertificateValidationCallback =
    new RemoteCertificateValidationCallback(
        delegate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
        {
            return true;
        });

var sslFailureCallback = new RemoteCertificateValidationCallback(delegate { return true; });

try
{

    if (ignoreSslErrors)
    {
        ServicePointManager.ServerCertificateValidationCallback += sslFailureCallback;
    }

    response = webClient.UploadData(Options.Address, "POST", Encoding.ASCII.GetBytes(Options.PostData));

}
catch (Exception err)
{
    PageSource = "POST Failed:\r\n\r\n" + err;
    return PageSource;
}
finally
{
    if (ignoreSslErrors)
    {
        ServicePointManager.ServerCertificateValidationCallback -= sslFailureCallback;
    }
}