WCF服务无法建立具有授权的SSL/TLS安全通道的信任关系

我有一个WCF服务，我想使用该服务连接到外部提供商的API。我的服务中的Client构造函数如下所示：

public partial class SomePortTypeclient : System.ServiceModel.ClientBase,SomeService.SomePortType
{
static partial void ConfigureEndpoint(System.ServiceModel.Description.ServiceEndpoint serviceEndpoint,System.ServiceModel.Description.ClientCredentials clientCredentials);
public SomePortTypeclient(string endpointUrl,TimeSpan timeout,string username,string password) :
base(SomePortTypeclient.GetBindingForEndpoint(timeout),SomePortTypeclient.GetEndpointAddress(endpointUrl))
{
this.ChannelFactory.Credentials.username.username = username;
this.ChannelFactory.Credentials.username.Password = password;
this.ChannelFactory.Credentials.ClientCertificate.SetCertificate(system.security.Cryptography.X509Certificates.StoreLocation.LocalMachine,system.security.Cryptography.X509Certificates.StoreName.Root,system.security.Cryptography.X509Certificates.X509FindType.FindByThumbprint,"11au2i3h3ir3o1748905");
}


客户端包括如下所示的https绑定：

private static System.ServiceModel.Channels.Binding GetBindingForEndpoint(TimeSpan timeout)
{
var httpsBinding = new BasicHttpsBinding();
httpsBinding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Certificate;
httpsBinding.Security.Mode = BasicHttpsSecurityMode.Transport;
var integerMaxValue = int.MaxValue;
httpsBinding.MaxBufferSize = integerMaxValue;
httpsBinding.MaxReceivedMessageSize = integerMaxValue;
httpsBinding.ReaderQuotas = system.xml.XmlDictionaryReaderQuotas.Max;
httpsBinding.AllowCOOKIEs = true;
httpsBinding.ReceiveTimeout = timeout;
httpsBinding.SendTimeout = timeout;
httpsBinding.OpenTimeout = timeout;
httpsBinding.CloseTimeout = timeout;
return httpsBinding;
}


然后是客户端的实际实现并调用端点：

TimeSpan duration = new TimeSpan(0,1,0);
SomePortTypeclient someclient = new SomePortTypeclient("https://endpointURL",duration,"username","password");
var respOnse= someclient.someMethod(someParameter).Result;


我在Windows证书管理器中创建了一个CSR，外部提供商提供了下图所示的证书，我将它们同时导入了本地计算机上的个人存储和根存储。这是我在客户端构造函数中使用“ SetCertificate”并通过指纹定位的顶级证书。该证书链接到中间CA，该证书又链接到根CA。

所以！当我运行代码并尝试调用端点时，出现以下错误：

关于证书和WCF服务，我有点菜鸟，所以我不确定这里可能出什么问题。我尝试使用个人存储和根存储中的三种不同证书。我还尝试过仅使用基本身份验证，而没有尝试同时设置用户名，密码和证书。我要调用的服务是SOAP服务。

更新：似乎证书没有使用正确的私钥签名。我重新导入了证书，错误消失了，但是现在我收到了一个新错误，提示“ A security error was encountered when verifying the message”。我环顾四周，看来这通常是由客户端/服务器之间的时间差异引起的。我也不知道如何解决此问题，因此不胜感激。

更新：我启用了WCF跟踪，这是该异常的堆栈跟踪：

131075302LAPTOP-U7FDFsnIhttps://docs.microsoft.com/dotnet/framework/wcf/diagnostics/tracing/System-ServiceModel-Diagnostics-ThrowingExceptionThrowing an exception.ConsoleApp1.exeSystem.ServiceModel.Security.SecurityNegotiationException,System.ServiceModel,Version=4.0.0.0,Culture=neutral,PublicKeyToken=b77a5c561934e089Could not establish secure channel for SSL/TLS with authority 'URI'. at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException,HttpWebRequest request,HttpAbortReason abortReason)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelAsyncRequest.CompleteGetResponse(IAsyncResult result)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelAsyncRequest.OnGetResponse(IAsyncResult result)
at System.Runtime.Fx.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result)
at System.Net.LazyAsyncResult.Complete(IntPtr userToken)
at System.Net.ContextAwareResult.CompleteCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext,ContextCallback callback,Object state,Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext,Object state)
at System.Net.ContextAwareResult.Complete(IntPtr userToken)
at System.Net.LazyAsyncResult.ProtectedInvokeCallback(Object result,IntPtr userToken)
at System.Net.HttpWebRequest.SetResponse(Exception E)
at System.Net.HttpWebRequest.CheckWriteSideResponseProcessing()
at System.Net.ConnectStream.ProcessWriteCallDone(ConnectionReturnResult returnResult)
at System.Net.HttpWebRequest.WriteCallDone(ConnectStream stream,ConnectionReturnResult returnResult)
at System.Net.ConnectStream.CallDone(ConnectionReturnResult returnResult)
at System.Net.ConnectStream.IOError(Exception exception,Boolean willThrow)
at System.Net.ConnectStream.HandleWriteHeadersException(Exception e,WebExceptionStatus error)
at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)
at System.Net.LazyAsyncResult.Complete(IntPtr userToken)
at System.Net.LazyAsyncResult.ProtectedInvokeCallback(Object result,IntPtr userToken)
at System.Net.TlsStream.ResumeIOWorker(Object result)
at System.Net.TlsStream.WakeupPendingIO(IAsyncResult ar)
at System.Net.LazyAsyncResult.Complete(IntPtr userToken)
at System.Net.LazyAsyncResult.ProtectedInvokeCallback(Object result,IntPtr userToken)
at System.Net.Security.SslState.FinishHandshake(Exception e,AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ReadFrameCallback(AsyncProtocolRequest asyncRequest)
at System.Net.AsyncProtocolRequest.CompleteRequest(Int32 result)
at System.Net.FixedSizeReader.CheckCompletionBeforeNextRead(Int32 bytes)
at System.Net.FixedSizeReader.ReadCallback(IAsyncResult transportResult)
at System.Net.LazyAsyncResult.Complete(IntPtr userToken)
at System.Net.ContextAwareResult.CompleteCallback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext,IntPtr userToken)
at System.Net.Sockets.BaseOverlappedAsyncResult.CompletionPortCallback(UInt32 errorCode,UInt32 numBytes,NativeOverlapped* nativeOverlapped)
at System.Threading._IOCompletionCallback.PerformioCompletionCallback(UInt32 errorCode,NativeOverlapped* pOVERLAP)
System.ServiceModel.Security.SecurityNegotiationException: Could not establish secure channel for SSL/TLS with authority 'URI'. ---> System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelAsyncRequest.CompleteGetResponse(IAsyncResult result)
--- End of inner exception stack trace ---System.Net.WebException,System,PublicKeyToken=b77a5c561934e089The request was aborted: Could not create SSL/TLS secure channel. at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelAsyncRequest.CompleteGetResponse(IAsyncResult result)System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelAsyncRequest.CompleteGetResponse(IAsyncResult result)