使用无效的 SSL 证书从 WSDL 生成服务代理时出现问题

Question

我正在尝试编写一个访问 Web 服务的小应用程序，但该 Web 服务具有无效的 SSL 证书。我无法控制这个事实，因为它是由第三方管理的。

我尝试通过 IE（作为管理员和我自己的用户）访问该网站并安装证书，但它似乎没有做太多事情，因为下次我浏览它时会遇到同样的错误。

当我运行 svcutil 时，我得到以下输出：

C:\Personal>svcutil.exe https://b2b:9443/LiveFeed.svc?wsdl
Microsoft (R) Service Model Metadata Tool
[Microsoft (R) Windows (R) Communication Foundation, Version 3.0.4506.2152]
Copyright (c) Microsoft Corporation.  All rights reserved.

Attempting to download metadata from 'https://b2b:9443/LiveFeed.svc?wsdl' using
WS-Metadata Exchange or DISCO.
Microsoft (R) Service Model Metadata Tool
[Microsoft (R) Windows (R) Communication Foundation, Version 3.0.4506.2152]
Copyright (c) Microsoft Corporation.  All rights reserved.

Error: Cannot obtain Metadata from https://b2b:9443/LiveFeed.svc?wsdl

If this is a Windows (R) Communication Foundation service to which you have acce
ss, please check that you have enabled metadata publishing at the specified addr
ess.  For help enabling metadata publishing, please refer to the MSDN documentat
ion at http://go.microsoft.com/fwlink/?LinkId=65455.


WS-Metadata Exchange Error
    URI: https://b2b:9443/LiveFeed.svc?wsdl

    Metadata contains a reference that cannot be resolved: 'https://b2b:9443/Liv
eFeed.svc?wsdl'.

    Could not establish trust relationship for the SSL/TLS secure channel with a
uthority 'b2b:9443'.

    The underlying connection was closed: Could not establish trust relationship
 for the SSL/TLS secure channel.

    The remote certificate is invalid according to the validation procedure.


HTTP GET Error
    URI: https://b2b:9443/LiveFeed.svc?wsdl

    There was an error downloading 'https://b2b:9443/LiveFeed.svc?wsdl'.

    The underlying connection was closed: Could not establish trust relationship
 for the SSL/TLS secure channel.

    The remote certificate is invalid according to the validation procedure.

If you would like more help, type "svcutil /?"

我知道问题与证书无效有关，但我似乎无法使证书受信任。我该怎么做呢？

到目前为止我所做的就是单击错误，查看证书，然后安装它。我已经在Windows选择它自己的证书存储中尝试过这个，并且在个人和受信任的存储中，这些都没有什么区别。

即使我设法解决这个问题，我也担心当我在客户的电脑上安装该应用程序时会遇到问题，因为我们位于两个不同的国家。

任何帮助将不胜感激。

Answer 1

它可能就像安装 cert 的根 CA 证书一样简单。

Answer 2

此问题的答案可能会对您有所帮助：.net WebService，绕过 ssl 验证！

Answer 3

  try this before calling the service..

  ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(
            delegate
            {
                return true;
            });