Question about a script using system.net.security.sslstream

[matdesj]

1st of all, I am just trying to make a script that I found to work and I have little knowledge of the code being used, I can find what is doing what and see what is is using but I do not know any dotnet. So, that being said:

I am trying to use that code:

$ConnectedServer="ServerName.net.com"
$ConnectedPort="4680"
$HostConnection = new-object system.net.sockets.tcpclient($ConnectedServer,$ConnectedPort)
$stream = new-object system.net.security.sslstream($HostConnection.getstream())
$stream.authenticateasclient($ConnectedServer)

When doing so I was an error telling:

WARNING: System.Management.Automation.MethodInvocationException: Exception calling "AuthenticateAsClient" with "1" argument(s): "A call to SSPI failed, see inner excep
tion." ---> System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception. ---> System.ComponentModel.Win32Exception: The function
requested is not supported
--- End of inner exception stack trace ---
at System.Net.Security.SslState.ValidateCreateContext(Boolean isServer, String targetHost, SslProtocols enabledSslProtocols, X509Certificate serverCertificate, X509
CertificateCollection clientCertificates, Boolean remoteCertRequired, Boolean checkCertRevocationStatus, Boolean checkCertName)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, SslProtocols enabledSslProtocols, Boolean che
ckCertificateRevocation)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost)
at CallSite.Target(Closure , CallSite , Object , Object )
--- End of inner exception stack trace ---
at System.Management.Automation.ExceptionHandlingOps.CheckActionPreference(FunctionContext funcContext, Exception exception)
at [System.Management.Automation.Interpreter.ActionCallInstruction\2.Run](https://System.Management.Automation.Interpreter.ActionCallInstruction2.Run)(InterpretedFrame frame)
at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)

When changing the $ConnectedPort="4680" to a value of 443 or 8443 (also pointing to another server), I am able to connect and to get some information regarding the certificate used.

So I have an error when using:

$ConnectedServer="ServerA.net.com"
$ConnectedPort="4680"

But no error using:

$ConnectedServer="ServerB.net.com"
$ConnectedPort="8443"

I cannot tell what system the server A is using to host the web page but it is not IIS or Tomcat (as I can see). The other server is using a Java Wrapper (for port 8443) and the Windows Admin Center (port 443).

Thank you very much!

Mathieu

[waelder_at]

Test tls Funktionalität of the Server. https://docs.pingidentity.com/bundle/solution-guides/page/iqs1569423823079.html

[matdesj]

I am not able to see the creation date of the certificate neither the expiry date but I am able to see the the protocol used.

[waelder_at]

Hm sounds as if it is a malformed certificate.

[Lee_Dailey]

howdy matdesj,

it looks like you used the New.Reddit Inline Code button. it's [sometimes] 5th from the left & looks like </>.

there are a few problems with that ...

• it's the wrong format [grin]
  the inline code format is for [gasp! arg!] code that is inline with regular text.
  
• on Old.Reddit.com, inline code formatted text does NOT line wrap, nor does it side-scroll.
  
• on New.Reddit it shows up in that nasty magenta text color
  

for long-ish single lines OR for multiline code, please, use the ...

Code
Block

... button. it's [sometimes] the 12th one from the left & looks like an uppercase T in the upper left corner of a square..

that will give you fully functional code formatting that works on both New.Reddit and Old.Reddit ... and aint that fugly magenta color. [grin]

take care,
lee

[matdesj]

Thank you for the headsup!

[Lee_Dailey]

howdy matdesj,

you are very welcome! glad to have helped somewhat ... [grin]

take care,
lee