Could not create SSL/TLS secure channel - Could the problem be a proxy server?

Question

I have a c# app that calls a web service method that authenticates using a certificate. The code works, because when it is installed on server A (without a proxy) it authen

Answer 1

In my experience, nearly all such messages are due to some machine in the chain (client, proxy, server) not "liking" a certificate for some reason.

To elaborate on what twk said, if you're using self-signed certificates, or your own CA, you need to install the signing cert in the trusted authorities store on the server at least, and possibly on the proxy.

Common problems I've encountered:

• The certificate on the server is not signed by an authority that the PROXY or the CLIENT trusts
• The certificate on the CLIENT is not signed by an authority that the PROXY or the SERVER trusts
• Oops, I forgot to export the private key when I created the cert to be installed on the client
• My process does not have read permissions to the private key on the client
• The client certificate is password protected and I didn't specify credentials when reading the certificate.