Asked by:
HRESULT -2146697191 (0x800C0019) "The Secure Sockets Layer (SSL) certificate is invalid." with CreateObject("MSXML2.XMLHTTP.6.0")

Question
-
the vbs script is working fine on windows 2003.
New OS windows 2008 server
https site and using
set xmlhttp = CreateObject("MSXML2.XMLHTTP.6.0")
xmlhttp.Open "GET", site , false, user, userPasswordError occurs at line:
xmlhttp.send "username=user&password=userPassword"
Please advise how to resolve for windows 2008.
Thanks.
Friday, December 2, 2011 2:57 AM
All replies
-
It may because the server certificate is not trusted by you. You may need to add server certificate to your trust list.
Friday, December 2, 2011 3:13 AM -
Was told the certificates were installed. Is there a way suppress certificate checking with MSXML2.XMLHTTP.6.0?Friday, December 2, 2011 8:30 PM
-
No. You cannot suppress certificate checking for security reason. Can yo check what will happen if you access the URL use IE?Monday, December 5, 2011 3:29 AM
-
User used IE and login to the site fine without certificate error. Could it be something in the script then? What is handled differently for MSXML2.XMLHTTP in 2003 vs 2008? ThanksMonday, December 5, 2011 9:44 PM
-
dim site
site="https://companyname.com"
set xmlhttp = CreateObject("MSXML2.XMLHTTP.6.0")
xmlhttp.Open "GET", URL, false, user, userPassword
xmlhttp.setRequestHeader "USER-AGENT", "USER-AGENT-NAME"
''Get error -2146697191 for following:
xmlhttp.send "username=user&password=userPassword"
Please advise. Thanks.Monday, December 5, 2011 9:59 PM -
Error: -2146697191 means "Security certificate required to access this resource is invalid. "
There are two certificates you need to check
1. Check sever certificate is trusted by your machine
2. Check if you have client certificate that required by your server.
Thanks,
Joey
Tuesday, December 6, 2011 3:44 AM -
1. Check sever certificate is trusted by your machine
Yes because IE from windows 2008 is able to go the https site with no certificate error. How to confirm that a from windows2008 server? Is it possible to get a list of certificates with serial numbers from command line?
2. Check if you have client certificate that required by your server.
Is there a switch in IIS for windows 2008 which require checking of Security certificate? Please advise. Thanks.
Tuesday, December 6, 2011 3:48 PM -
Sorry I cannot offer more help on this since the error -2146697191 is comming from URLMON (LINK: http://social.msdn.microsoft.com/Forums/en-US/xmlandnetfx/thread/b38d17fb-dad4-4e99-9802-e31e6f2f3dcc), and I am not an expert on that area.
My suggestion is to carefully exam the certificate chain.
PS. Here are links i found, hope it helps:
* http://help.aol.com/help/microsites/microsite.do?cmd=displayKC&docType=kc&externalId=223215
Wednesday, December 7, 2011 5:37 AM