Go Back

"The remote certificate is invalid according to the validation procedure" error in xfNetLink .NET

Article Number: 2375
First Published:
Modified:
Recent Activity:
Views: 43
OS: Windows
Product: xfServerPlus, xfNetLink .NET

You may see this error when using encryption with xfServerPlus and an xfNetLink .NET client. The exception error is RemoteCertificateNameMismatch, but it is not logged in the Windows event log.


The problem occurs when the common name (commonName) in the pem file does not match the host name passed by the xfNetLink .NET connect() method (or defined in the app config file [if you\'re using the connect() method that does not pass the host name], or set with XFNLNET_CLASS_HOST). Note that if you do not pass the host name or define it in an app config file or with XFNLNET_CLASS_HOST, "localhost" is used.


The match can be exact or use wildcards. For example, if the xfServerPlus host name is myserver.mydomain.loc, it would match a certificate with a commonName of "myserver.mydomain.loc" or "*.mydomain.loc". Using a wildcard enables you to create a certificate that can be used by multiple servers on the same domain. You can specify alternate names in the perm file if you like and match one of those. However you cannot, for example, use the machine\'s name for one value and its IP address for the other.


To correct the problem, remake your pem file and specify the host name of the xfServerPlus machine for the commonName value. (This is specified in the configuration file or when prompted.) See Requesting and creating certificates in the Synergy/DE documentation for more information.



THE INFORMATION PROVIDED TO YOU IN THIS SERVICE IS FOR YOUR USE ONLY. THE INFORMATION MAY HAVE BEEN DEVELOPED INTERNALLY BY SYNERGEX OR BY EXTERNAL SOURCES. SYNERGEX MAKES NO WARRANTIES, EXPRESS OR IMPLIED, REGARDING THIS INFORMATION, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL SYNERGEX BE LIABLE FOR ANY DAMAGES OR LOSSES INCURRED BY YOU IN USING OR RELYING ON THIS INFORMATION, INCLUDING WITHOUT LIMITATION GENERAL DAMAGES, DIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES, OR LOSS OF PROFITS, EVEN IF SYNERGEX HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Please log in to comment on this article.