DotNet Core HttpClient安全错误

Question

我有一个类库来执行4.6.1框架中html" target="_blank">构建的Rest API调用。我用过System.网。Http V4 HttpClient用于管理呼叫。此库适用于普通的dotnet应用程序。最近我尝试了一个DotNet Core应用程序，它失败了与安全错误。后来我修改了库后建议。它有一些进展，但应用程序失败与错误如下所示

错误消息：发送请求时出错。Innerexception消息：发生安全错误。StackTrace:at系统。运行时。例外服务。例外DispatchInfo。向系统抛出（）。穿线。任务。等待的约会'1。系统中的GetResult（）。网Http。WinHttpHandler。迪乌105。MoveNext（）

图书馆代码：

private readonly HttpClient _client = null;
private ICredentials somecred;

    public Program()
    {
        HttpClientHandler clientHandler = new HttpClientHandler { Credentials = somecred, UseDefaultCredentials = false };
        _client=new HttpClient(new MessageHandler(clientHandler, TimeSpan.FromSeconds(1), 1), false);
        _client.Timeout = TimeSpan.FromSeconds(90);
        _client.BaseAddress = new Uri("https://somedomain.com/");

        ServicePointManager.ServerCertificateValidationCallback += (sender, cert, chain, sslPolicyErrors) => true;
        ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls12;
        ServicePointManager.DefaultConnectionLimit = 10;
        ServicePointManager.Expect100Continue = true;
    }

    public async Task<IOperationResponse> GetData()
    {
        ServicePointManager.ServerCertificateValidationCallback += (sender, cert, chain, sslPolicyErrors) => true;
        ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls12;

        using (HttpResponseMessage httpResponse =
                await _client.SendAsync(new HttpRequestMessage(HttpMethod.Head, "api/getdata"), HttpCompletionOption.ResponseHeadersRead).ConfigureAwait(false)
                )
        {
            if (httpResponse != null) { ... }
        }
    }

    internal class MessageHandler : DelegatingHandler
    {
        public MessageHandler(HttpMessageHandler innerHandler, TimeSpan retryInterval, int retryCount) : base(innerHandler)
        {

        }

        protected override async Task<HttpResponseMessage> SendAsync(
        HttpRequestMessage request,
        CancellationToken cancellationToken)
        {
            HttpResponseMessage response = null;

            //!! security error in below line
            response = await base.SendAsync(request, cancellationToken).ConfigureAwait(false);
        }
    }

请让我知道，这个库运行DotNet Core应用程序需要做什么。谢谢。

Answer 1

根据同事的建议，我做了以下代码更改，并修复了它。

//original code
_client.BaseAddress = new Uri("https://xyz.abc.somedomain.com/");

//fix code
_client.BaseAddress = new Uri("https://abc.somedomain.com/");
_client.DefaultRequestHeaders.Host = "xyz.abc.somedomain.com";

我将此标记为答案，尽管我不完全理解这种行为。

Answer 2

我已经用一个核心项目和一个外部4.5库在本地测试了你的代码，我能触发安全错误的唯一方法是如果目标站点没有正确的安全级别（即没有正确设置SSL）。当目标站点的SSL配置正确时，调用通过。

确保您的目标具有SSL设置或针对另一个已知的工作SSL站点进行测试，以查看您是否仍然遇到此问题。