Web API with HTTPs

Udai Mathur

7y3.7kWeb Development

Hello,

I have created one WEB API and one MVC web application. Both hosted on to IIS.

I am able to consume WEB API thorugh MVC application.

NOW I changed the binding of both the applcation from http to https with self signed certificate.

But when I call web api from MVC application it gives me below given error.

"The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel."

My CODE:

// POST: Login/Create
[HttpPost]
public async System.Threading.Tasks.Task Create(Users objusers)
{
try
{
// TODO: Add insert logic here
BearerToken token = null;
using (var httpClient = new HttpClient())
{
var tokenRequest =
new Liststring, string>>
{
new KeyValuePair<string, string>("grant_type", "password"),
new KeyValuePair<string, string>("username", objusers.username),
new KeyValuePair<string, string>("password", objusers.password)
};
HttpContent encodedRequest = new FormUrlEncodedContent(tokenRequest);
HttpResponseMessage response = httpClient.PostAsync("https://localhost:1100/Token", encodedRequest).Result;
if (response.IsSuccessStatusCode)
{
token = response.Content.ReadAsAsync().Result;
Session["ApiAccessToken"] = token.access_token;
}
else
{
Session["ApiAccessToken"] = "";
}
}
List benefitelections = new List();
if (Session["ApiAccessToken"].ToString() != "")
{
using (var httpClient = new HttpClient())
{
httpClient.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", Session["ApiAccessToken"].ToString());
var response = httpClient.GetAsync("https://localhost:1100/api/benefit/169548230").Result;
if (response.IsSuccessStatusCode)
{
var data = await response.Content.ReadAsStringAsync();
//var myObj = data.Substring(1, data.Length - 2);
benefitelections = JsonConvert.DeserializeObject>(data.ToString());
}
}
return View("Index", benefitelections);
}
else
{
return View("Create");
}
//return RedirectToAction("Index", benefitelections);
}
catch (Exception Ex)
{
Ex.ToString();
return View("Create");
}
}

This code is working fine in case of http binding.

6 Replies

Know the answer? Post it — somebody with the same question will find it here.

Udai Mathur7y ago
I have created self sigend certificate in IIS.

Changed Edit binding of my web api and mvc appication with https and selected the newly created certificate.

In mmc first exprorted the certificate and then inported it with in personal folder.

I have modified my code and still I am getting the same error.

"The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel."

My Code:
// POST: Login/Create
[HttpPost]
public async System.Threading.Tasks.Task Create(Users objusers)
{
    try
    {
        // TODO: Add insert logic here

        string actionURI = "https://localhost:1100/";

        Uri address = new Uri(actionURI);

        HttpRequestMessage request = new HttpRequestMessage
        (HttpMethod.Get, address); // HttpMethod.Post is also works

        var cert = new X509Certificate2(@"D:\Cer\Demo.cer");

        List<string> certs = new List<string>();
        certs.Add(cert.Thumbprint);
        request.Headers.Add("Thumbprint", certs);

        BearerToken token = null;

        using (var httpClient = new HttpClient())
        {
            var tokenRequest =
                new Liststring, string>>
                    {
                        new KeyValuePair<string, string>("grant_type", "password"),
                        new KeyValuePair<string, string>("username", objusers.username),
                        new KeyValuePair<string, string>("password", objusers.password)
                    };

            HttpContent encodedRequest = new FormUrlEncodedContent(tokenRequest);

            HttpResponseMessage response = httpClient.PostAsync(address, encodedRequest).Result; //It throws error here

            if (response.IsSuccessStatusCode)
            {
                token = response.Content.ReadAsAsync().Result;

                Session["ApiAccessToken"] = token.access_token;
            }
            else
            {
                Session["ApiAccessToken"] = "";
            }
        }

        List benefitelections = new List();

        if (Session["ApiAccessToken"].ToString() != "")
        {
            using (var httpClient = new HttpClient())
            {
                httpClient.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", Session["ApiAccessToken"].ToString());

                var response = httpClient.GetAsync("https://localhost:1100/api/benefit/169548230").Result;

                if (response.IsSuccessStatusCode)
                {
                    var data = await response.Content.ReadAsStringAsync();
                    //var myObj = data.Substring(1, data.Length - 2);

                    benefitelections = JsonConvert.DeserializeObject>(data.ToString());
                }
            }

            return View("Index", benefitelections);
        }
        else
        {
            return View("Create");
        }
        //return RedirectToAction("Index", benefitelections);

    }
    catch (Exception Ex)
    {
        Ex.ToString();
        return View("Create");
    }
}
The same code is working fine in http binding.
Vimlesh Tiwari7y ago
Udai, As you are using self signed certificate. It needs to be added in Certificate Authority store.
Jignesh Kumar7y ago
Hello,

Please try this link,

https://support.solarwinds.com/SuccessCenter/s/article/Error-The-underlying-connection-was-closed-could-not-establish-trust-relationship-for-the-SSL-TLS-secure-channel
Madan Shekar7y ago
https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/working-with-ssl-in-web-api

https://www.codeproject.com/Articles/838276/Web-API-Thoughts-of-Working-with-HTTPS
Udai Mathur7y ago
I already gone through with this article.
In this article itadded the certificate to :
Add the SSL Certificate into SharePoint Trusted Root Certificate authority

But in my case it is simple web API no share point.
Madan Shekar7y ago
go through this blog
https://www.c-sharpcorner.com/UploadFile/anavijai/could-not-establish-trust-relationship-for-the-ssltls-secure-channel/