CODEWITHSUNDEEP
c#asp.netiisx509kentor-authservices
David
David

Reputation: 235

"The specified network password is not correct" on a certificate without a password, on live server only

I'm using kentor authservices in a SAML service provider project built in asp webforms.

It works great on the development machine but when I put it on the production server (windows 2012 R2, IIS 8), the X509Certificates.X509Utils._LoadCertFromFile call throws an exception "The specified network password is not correct."

Only, the certificate (pfx) has no password and the location it sits in is not secured in any unusual way that I can see, but to be sure i've tried with 'everyone' temporarily granted full access to the folder.

The section of the web config relevant is:

<serviceCertificates>
  <add fileName="~/App_Data/M_SSO_SP.pfx"/>
</serviceCertificates>

Though I don't think it is code related, based on it working fine on the development machine - possibly some server-side problem with the certificate?

Any help would be appreciated greatly.

Upvotes: 8

Views: 13544

Answers (2)

Sayedeh Mahshid Fatemi
Sayedeh Mahshid Fatemi

Reputation: 203

I had the same issue, problem solved after I installed my pfx file on server.

Upvotes: 0

Anders Abel
Anders Abel

Reputation: 69260

Looks like getting this error when loading a certificate from file is a known error: ASP.NET - The specified network password is not correct

Kentor.AuthServices doesn't set the MachineKeySet flag as suggested, which it probably should. I've filed an issue in the github repo that it should be fixed. Please follow up on that issue to see when a fix is avilable.

Upvotes: 2

Related Questions