Kentor AuthServices - SP 的 serviceCertificates(受密码保护的 .pfx)抛出网络密码错误 [英] Kentor AuthServices - serviceCertificates for SP (.pfx with password protected) throwing network password error

问题描述

错误:指定的网络密码不正确.

Error: The specified network password is not correct.

说明:在执行当前 Web 请求期间发生了未处理的异常.请查看堆栈跟踪以获取有关错误及其在代码中的来源的更多信息.

Description: An un handled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

异常详细信息:指定的网络密码不正确.

Exception Details: The specified network password is not correct.

原因:我只能导出受密码保护的证书.pfx".据我所知，Kentor AuthServices"不支持密码保护..

Reason: I can only export certificate '.pfx' with the password protected. "Kentor AuthServices" doesn't support password protected as I understand..

据说此问题已根据以下链接关闭https://github.com/KentorIT/authservices/issues/457

It is said that this issue is closed as per below link https://github.com/KentorIT/authservices/issues/457

.Net 错误:这是因为设置了X509KeyStorageFlags.MachineKeySet"标志..

.Net error: it is because of 'X509KeyStorageFlags.MachineKeySet' flag set..

我所做的只是将 .pfx 文件保存在我的解决方案中，并将服务器证书文件路径指向它.我还需要做任何其他事情来解决错误吗?

All I did was saved the .pfx file in my solution and pointed the server certificate file path to it. Do I need to do anything else to pass through the error?

非常感谢您的帮助.

推荐答案

当您在证书管理器中导出 .pfx 文件时，系统会提示您输入密码，但您可以将其留空并按确定"以生成没有密码的 pfx.

When you export the .pfx file in the certificate manager you are prompted for a password, but you can leave it blank and press ok to generate a pfx without passwords.

在测试/开发环境中使用 pfx 是一种简单的方法，其中在源代码中包含 pfx 让每个人都可以获取源代码并运行.这就是我为存储库中的示例应用程序这样做的原因.

Having a pfx is a simple approach in test/dev environments where including the pfx in the source lets everyone just get the source and run. That's why I'm doing that for the sample applications in the repository.

但在生产环境中，证书应始终安全地存储在操作系统的证书存储区中.切勿在生产中使用 pfx 文件.证书配置允许您指定证书存储而不是文件名.请参阅配置文档

But in a production environment the certificates should always be stored securely in the certificate store of the operating system. Never use a pfx file in production. The certificate configuration allows you to specify a certificate store instead of a file name. See the configuration documentation

这篇关于Kentor AuthServices - SP 的 serviceCertificates(受密码保护的 .pfx)抛出网络密码错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！