Remote Certificate Invalid
garybr44
Posts: 4 Bronze 1
I had setup Monitor according to the install directions, and created a local, self-signed certificate in IIS at attached it to the bindings for SqlMontor. Any time I open SQL Monitor via the client, it gives me an invalid certificate message. Also in Event Viewer, I have a lot of errors in the Red Gate Software log which are the same:
Description:
2018-11-19 15:56:20,809 [44] ERROR RedGate.SqlMonitor.UI.Website.ReportPoller [(null)] - System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at........
2018-11-19 15:56:20,809 [44] ERROR RedGate.SqlMonitor.UI.Website.ReportPoller [(null)] - System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at........
Anyone know how to resolve this?
Tagged:
Answers
Thank you for your forum post.
Does the advice in the help article, help you resolve the problem, particularly the section titled "IIS Configuration' and the following section "Add SQL Monitor Web Site"?
Many Thanks
Eddie
Senior Product Support Engineer
Redgate Software Ltd
Email: support@red-gate.com
Using Firefox, it indicates it doesn't like the certificate because it is self-signed:
https://tfa-vwebsrv01/
HTTP Public Key Pinning: false
Using Edge, it gives me this:
Your PC doesn’t trust this website’s security certificate.
The hostname in the website’s security certificate differs from the website you are trying to visit.
Error Code: DLG_FLAGS_INVALID_CA
DLG_FLAGS_SEC_CERT_CN_INVALID
Any browser gives me a similar message. If I do not use HTTPS protocol, all works fine which is what I will probably do. Not a high critical connection to keep encrypted.
Thanks again.