Could not establish trust relationship for SSL/TLS secure channel — SOAP

Thoughts (based on pain in the past):

  • do you have DNS and line-of-sight to the server?
  • are you using the correct name from the certificate?
  • is the certificate still valid?
  • is a badly configured load balancer messing things up?
  • does the new server machine have the clock set correctly (i.e. so that the UTC time is correct [ignore local time, it is largely irrelevent]) – this certainly matters for WCF, so may impact regular SOAP?
  • is there a certificate trust chain issue? if you browse from the server to the soap service, can you get SSL?
  • related to the above – has the certificate been installed to the correct location? (you may need a copy in Trusted Root Certification Authorities)
  • is the server’s machine-level proxy set correctly? (which different to the user’s proxy); see proxycfg for XP / 2003 (not sure about Vista etc)

Leave a Comment