基础连接已关闭。无法使用http.sys运行ASP.NET core 2.1 web api应用程序？

Question

我创建了一个新的ASP.NET Core2.1web应用程序，然后选择“API”模板。（我将身份验证更改为“Windows”。然后添加以下代码，使用http.sys进行Windows身份验证。(https://docs.microsoft.com/en-us/aspnet/core/security/Authentication/windowsauth？view=aspnetcore-2.1&tabs=aspnetcore2x)

using Microsoft.AspNetCore.Server.HttpSys; // Added

    public static void Main(string[] args)
    {
        CreateWebHostBuilder(args).Build().Run();
    }

    public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
        WebHost.CreateDefaultBuilder(args)
            .UseStartup<Startup>()
            // Added
            .UseHttpSys(o => 
            {
                o.Authentication.Schemes = AuthenticationSchemes.NTLM | 
                                           AuthenticationSchemes.Negotiate;
                o.Authentication.AllowAnonymous = false;
            });

下面的消息显示了运行应用程序时的输出消息。

info: Microsoft.AspNetCore.DataProtection.KeyManagement.XmlKeyManager[0]
      User profile is available. Using 'C:\Users\...\AppData\Local\ASP.NET\Da
taProtection-Keys' as key repository and Windows DPAPI to encrypt keys at rest.
info: Microsoft.AspNetCore.Server.HttpSys.HttpSysListener[0]
      Start
info: Microsoft.AspNetCore.Server.HttpSys.HttpSysListener[0]
      Listening on prefix: https://localhost:5001/
info: Microsoft.AspNetCore.Server.HttpSys.HttpSysListener[0]
      Listening on prefix: http://localhost:5000/
Hosting environment: Development
Content root path: C:\work\WebApplication1
Now listening on: https://localhost:5001
Now listening on: http://localhost:5000
Application started. Press Ctrl+C to shut down.

用powershell测试

PS C:\work> Invoke-WebRequest https://localhost:5001/api/values
Invoke-WebRequest : The underlying connection was closed: An unexpected error occurred on a send.
At line:1 char:1
+ Invoke-WebRequest https://localhost:5001/api/values
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebException
    + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand

PS C:\work> Invoke-WebRequest http://localhost:5000/api/values
Invoke-WebRequest : The remote server returned an error: (401) Unauthorized.
At line:1 char:1
+ Invoke-WebRequest http://localhost:5000/api/values
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebException
    + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand

fiddler.network.HTTPS>HTTPS与本地主机握手失败(#3)。System.io.ioException无法从传输连接读取数据：远程主机强制关闭了现有连接。<现有连接被远程主机强制关闭

Internet Explorer返回以下消息。

在高级设置中打开TLS 1.0、TLS 1.1和TLS 1.2，然后再次尝试连接到https://localhost:5001。如果此错误仍然存在，则此站点可能使用了不受支持的协议或密码套件，如RC4（详细信息链接），这被认为是不安全的。请与您的站点管理员联系。

Answer 1

您需要在ACL中添加/安装自签名证书，并且需要添加到本地主机的“受信任的根证书颁发机构”中。

或

u可以注释app.useHttpsRedirection()；，在LaunchSettings.json中，您需要以下内容：

"applicationUrl": "http://localhost:5000",

"iisExpress": {
  "applicationUrl": "http://localhost:49845",
  "sslPort": 0 //44382