服务器拒绝 Biztalk X.509 证书
我们的 ssl 证书最近过期了，因此 CA 为我们颁发了一份新证书。 不幸的是，当 biztalk 使用此证书访问服务器时，服务器拒绝它，给我们一个 403.17 错误（已过期或尚未有效）。
所以我检查了证书的日期，看起来没问题。 但为了真正检查证书是否有效，我们将其加载到 IE7 中并尝试访问服务器。 这样做是有效的。
Biztalk 会查看证书的硬编码位置，但我们已经用新文件替换了该文件。
知道为什么当 Biztalk 尝试访问服务器时会被拒绝吗？
Our ssl certificate recently expired, so we were issued a new one by the CA. Unfortunately, when biztalk uses this certificate to access a server, the server rejects it, giving us a 403.17 error (Expired or not yet valid).
So I checked the dates of the certificate and it seems okay. But to really check if the certificate was working, we loaded it into IE7 and tried to access the server. Doing so works.
Biztalk looks at a hard-coded location for the certificate, but we've already replaced that file with the new one.
Any idea why when Biztalk tries to access the server, it gets rejected?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
也许 Biztalk 已经缓存了您的证书？
Maybe Biztalk has cached your certificate?
我们已经找到了解决方案。 问题在于访问证书和私钥。 更换证书时，仅安装它是不够的。 为什么？ 因为它只会安装在当前用户下。
Biztalk 以用户身份运行：BizTalkSVC，并且该帐户无权访问该证书。
一旦获得许可，它就会像魅力一样运行！
We've found out the solution. The problem was access to the certificate and private key. When replacing the certificate, its not enough to install it. Why? Because it will only be installed under the current user.
Biztalk runs as a user: BizTalkSVC, and that account did not have permission to access the certificate.
Once it was granted permission, it ran like a charm!