PowerShell

Question

我完成了 this answer 的步骤 1-4，这将我的证书添加到 "Trusted Root Certification Authorities" > "Certificates," 并且证书被授予 <All> 预期用途。

当 $ftp_request.EnableSsl = $true 时，执行以下 PowerShell 代码失败并显示 The remote certificate is invalid according to the validation procedure。当 $ftp_request.EnableSsl = $false.

时成功

$file_folder = "C:\Users\username\Desktop"
$file_name = "test.txt"
$file_path = "$file_folder$file_name"
$ftp_path = "ftp://127.0.0.1/$file_name"

$username = "user"
$pwd = "pass"

# Create a FTPWebRequest object to handle the connection to the ftp server
$ftp_request = [System.Net.FtpWebRequest]::Create($ftp_path)

# set the request's network credentials for an authenticated connection
$ftp_request.Credentials =
    New-Object System.Net.NetworkCredential($username, $pwd)

$ftp_request.UseBinary = $true
$ftp_request.UsePassive = $true
$ftp_request.KeepAlive = $false

$ftp_request.EnableSsl = $true

$ftp_request.Method = [System.Net.WebRequestMethods+Ftp]::UploadFile

$file_contents = Get-Content -en byte $file_path
$ftp_request.ContentLength = $file_contents.Length

$ftp_stream = $ftp_request.GetRequestStream()
$ftp_stream.Write($file_contents, 0, $file_contents.Length)
$ftp_stream.Close()
$ftp_stream.Dispose()

我知道可以通过向 ServicePointManager.ServerCertificateValidationCallback 编写处理程序来手动处理此问题，但我希望 Windows 证书管理器自动处理 SSL 证书。

Answer 1

$ftp_path = "ftp://127.0.0.1/$file_name"

为所有目的添加一个证书并不意味着一个证书对所有主机都是信任的。您用于连接的主机名仍然必须与证书的主题相匹配。虽然您没有提供有关证书本身的任何信息，但我的猜测是您的证书不是针对主题“127.0.0.1”颁发的。

PowerShell - Windows 可信证书未通过 FTP 验证 SSL

PowerShell - Windows Trusted Certificate not Authenticating SSL over FTP

ssl

ftp

filezilla

ftps