Web test result for a URL which needs a client certificate to authenticate

Question

Hi,
we want to check URL response of a .asmx URL which needs a client certificate for authenticating.
I got the cert object and then passed it to invoke-webrequest cmdlet, but no matter what i try I always get this error
“The underlying connection was closed”.
code1
$WebClient = New-Object System.Net.WebClient
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
$WebClient.DownloadString(“https://server1/mywebservices/myser.asmx”)
code2
$url=”https://server1/mywebservices/myser.asmx”
$cert=(Get-ChildItem cert: -Recurse | where {$_.Thumbprint -eq “abcdefgh3333…..something”}| Select -First 1)
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
#load my client certificate defined by thumbprint
$HTTP_Request = [System.Net.WebRequest]::Create($url)
$HTTP_Request.ClientCertificates.Add($cert )
# We then get a response from the site.
$HTTP_Response = $HTTP_Request.GetResponse()
Can someone please help me.
Thanks
Manish

Answer 1

Hi Anna
Thanks for the reply.
I used the function referred earlier in my script, as below.
It is still throwing error. However it does work in powershell v2.
Is there any specific change required in the script to make it work with V3. I tried invoke-webrequest and it failed too.
function Ignore-SSLCertificates
    $Provider = New-Object Microsoft.CSharp.CSharpCodeProvider
    $Compiler = $Provider.CreateCompiler()
    $Params = New-Object System.CodeDom.Compiler.CompilerParameters
    $Params.GenerateExecutable = $false
    $Params.GenerateInMemory = $true
    $Params.IncludeDebugInformation = $false
    $Params.ReferencedAssemblies.Add("System.DLL") > $null
    $TASource=@'
        namespace Local.ToolkitExtensions.Net.CertificatePolicy
            public class TrustAll : System.Net.ICertificatePolicy
                public bool CheckValidationResult(System.Net.ServicePoint sp,System.Security.Cryptography.X509Certificates.X509Certificate cert, System.Net.WebRequest req, int problem)
                    return true;
    $TAResults=$Provider.CompileAssemblyFromSource($Params,$TASource)
    $TAAssembly=$TAResults.CompiledAssembly
    ## We create an instance of TrustAll and attach it to the ServicePointManager
    $TrustAll = $TAAssembly.CreateInstance("Local.ToolkitExtensions.Net.CertificatePolicy.TrustAll")
    [System.Net.ServicePointManager]::CertificatePolicy = $TrustAll
$url="https://server1/mywebservices/myser.asmx"
$certs = Get-ChildItem Cert:\CurrentUser\My | where {
$_.Thumbprint -eq “abcdefgh3333…..something”} 
$HTTP_Request = [System.Net.WebRequest]::Create($url)
Ignore-SSLCertificates
try
    $HTTP_Request.ClientCertificates.Add($certs )
    # We then get a response from the site.
    $HTTP_Response = $HTTP_Request.GetResponse()
catch [System.exception]
    Write-Error $error[0].Exception
$HTTP_Status = [int]$HTTP_Response.StatusCode
Manish