MPNS：更新的证书被拒绝，并出现401错误 [英] MPNS: Updated certificate is rejected with a 401 error

问题描述

我们正在使用IBM Worklight开发我们的应用程序，并且在证书过期之前发送推送通知正常工作。所以我们请求了一个新证书（来自同一个权威机构），使用相同的命令创建Worklight所需的密钥库，
更新了Microsoft Dashboard上的证书，重新启动了服务器并且......收到了401错误。日志：

We are using IBM Worklight for developing our App and sending Push Notifications worked fine until the certificate expired. So we requested a new certificate (from the same Authority), used the same commands to create the keystore required by Worklight, updated the certificate on the Microsoft Dashboard, restarted the server and... receive a 401 error in the logs:

严重：FWLSE0135E：未通过Microsoft推送通知服务（MPNS）向订阅https://s.notify.live.net/a/1/[XXX发送通知由于"401 Unauthorized"。 [项目工作灯]

SEVERE: FWLSE0135E: Notification through Microsoft Push Notification Service (MPNS) to subscription https://s.notify.live.net/a/1/[XXX] was not delivered due to "401 Unauthorized". [project worklight]

无论我们尝试什么，Microsoft服务器都会向我们提供此错误消息。我们对证书进行了检查（它们是相同的，除了日期等），Java密钥库，公共名称等。

No matter what we try, the Microsoft server is giving us this error message. We tripple-checked the certificates (they are the same except for the date etc.), the Java keystore, the Common Name etc.

IBM Worklight团队还检查了使用Worklight Push Demo应用程序获得以下结果的证书：

The IBM Worklight team also checked the certificate with the Worklight Push Demo app with the following results:

- 他们的内部测试证书正常工作

- 另一位客户的证书正常工作

- 我们的证书被401拒绝。

- their internal test certificate works fine
- the certificate of another customer works fine
- our certificate is rejected with a 401.

如果没有Microsoft方面的日志，我们应该如何继续调试问题？是否有其他测试连接的方法？

How should we continue to debug the issue, if there are no logs from the Microsoft side? Any other way of testing the connection?

推荐答案

b
 

基于根据您的描述，我们知道推送通知应用程序由于"401 Unauthorized"而无法发送通知，此问题可能是由您的证书引起的，我建议您检查证书，确保证书必须
符合以下标准：

• 必须将TLS证书的密钥用法值设置为包括客户端身份验证。

• 根证书颁发机构（CA）证书必须是
中列出的CA之一
Windows Phone OS 7.1的SSL根证书。使用此列表，无论您的应用是用于Windows Phone OS 7.1还是Windows Phone 8.


 

如果可能，我建议您使用WNS而不是MPNS ，它更可靠，更快，重要的是它不需要管理证书，它使用OAuth，参考
https://msdn.microsoft.com/en-us/library/windows/apps/hh913756.aspx ，了解有关如何通过WNS发送通知的更多信息。请注意，在Windows
手机8.0上无法使用WNS，但WP8.1是免费升级。请看一下这篇文章：
https ：//msdn.microsoft.com/en-us/library/windows/apps/dn642085（v = vs.105）.aspx ，它包含以下主题：

#Upgrade Windows Phone 8应用程序到Windows Phone Silverlight 8.1

＃在Silverlight 8.1应用程序中从MPNS升级到WNS

 

最好的问候，

Jambor

Hi,
 
Based on your description, we know that the push Notification application couldn't send notification due to "401 Unauthorized", this issue maybe caused by your certificate, I would suggest you check the certificate, make sure the certificate must meet the following criteria:
• The Key-Usage value of the TLS certificate must be set to include client authentication.
• The root Certificate Authority (CA) of the certificate must be one of the CAs listed at SSL root certificates for Windows Phone OS 7.1. Use this list whether your app is for Windows Phone OS 7.1 or Windows Phone 8.
 
If possible I would suggest you use WNS instead of MPNS, it is more reliable and more faster, the important is it doesn't need to manage certificates, it uses OAuth, refer to https://msdn.microsoft.com/en-us/library/windows/apps/hh913756.aspx for more information about how to send notification via WNS. Please note it is not possible to use WNS on Windows Phone 8.0, but WP8.1 is a free upgrade. Please have a look at this article : https://msdn.microsoft.com/en-us/library/windows/apps/dn642085(v=vs.105).aspx , it contains the following topics:
#Upgrade Windows Phone 8 apps to Windows Phone Silverlight 8.1
#Upgrading from MPNS to WNS in your Silverlight 8.1 app
 
Best Regards,
Jambor

这篇关于MPNS：更新的证书被拒绝，并出现401错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！