Thread: "The remote certificate is invalid according to the validation procedure"

We are using version 7.0.1.2, and all of a sudden, some (but not all) customers are seeing the error message below. Any ideas? We made sure the SSL cert looks correct, and even reinstalled the intermediate cert for GoDaddy, but no luck. It seems to only happen on new account creation or when new users are checking out for the first time.

Code:

The remote certificate is invalid according to the validation procedure. 
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 

Exception Details: System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

Source Error: 

Line 657:                        request.ContentType = "application/x-www-form-urlencoded";
Line 658:                        request.ContentLength = byteData.Length;
Line 659:                        Stream requestStream = request.GetRequestStream();
Line 660:                        requestStream.Write(byteData, 0, byteData.Length);
Line 661:                        requestStream.Close(); 

Source File: c:\Inetpub\wwwroot\Web\createaccount.aspx.cs    Line: 659 

Stack Trace: 

[AuthenticationException: The remote certificate is invalid according to the validation procedure.]

[WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.]

Hi,

I've just checked the source code of an old 7.0.x release and createaccount.aspx.cs doesn't have any code that matches your error lines.

Is your store customised?

Either way, that could looks like the tail end of a routine that is trying to send some data to a website and it's the remote site that's giving the error.

As a bit of a hack, and if you trust the site, you could try turning off certificate validation prior to the send.

Adam

Ah, you were right - there is custom code in there that I didn't know about. It was making a call to a third party https site, which had an el-cheapo cert. Once I installed the intermediate cert for company, it worked.

Thanks!