Forums (Obsolete)

Member

dmitry.k-markerstudio - 12/18/2012 2:00:35 PM

Kentico Scheduler with SSL

Hi,

I have a Kentico based website. For this website I have set up self-generated development SSL certificate. And now after each website update on my test server the Kentico Scheduler can't run (I use Kentico Scheduled tasks - http://devnet.kentico.com/docs/devguide/index.html?scheduling_a_custom_code.htm . I didn't set up any additional service. It's just out of box Kentico application functionality). I see the following error in the

Event log:

Message: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 
Stack Trace: 
at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request)
at System.Net.WebClient.DownloadData(Uri address)
at CMS.Scheduler.SchedulingHelper.RunSchedulerRequest(String url)
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.runTryCode(Object userData)
at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean ignoreSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)

REQUESTED URL: https://mywebsite.com/CMSPages/scheduler.aspx

Sometimes it's fixed by iisreset. But sometimes not. And it's interesting that I don't have this problem on my local machine - it works fine with self-generated development certificate.
The website is accessable from that server.

Could you please advice how I can fix this issue?

Also I see this warning in the Event log, maybe it could be helpful:

Event code: FULLTRUSTREQUEST
Event URL: /CMSModules/EventLog/EventLog.aspx
URL referrer: https://mywebsite.com/CMSSiteManager/administration/leftmenu.aspx
Description: Web farm notify watcher wasn't initialized. It is available only under full trust level.


Kentico Customer Success	kentico_martind2 - 12/20/2012 8:12:38 AM RE:Kentico Scheduler with SSL Hi Dmitry, Are you running your site under medium-trust level? Best regards, Martin Danko


Member	lancetek - 3/13/2013 4:42:52 PM RE:Kentico Scheduler with SSL I just started getting this problem on a server with IIS7 and a self-signed certificate. The event log is full of this scheduling error. The application is running in full trust. It's on it's own server.


Kentico Support	kentico_jurajo - 3/13/2013 6:48:37 PM RE:Kentico Scheduler with SSL Hi, Under which URL is the application accessing the server (itself basically). It seems, that some internal IP is probably used and the SSL is not issued for given IP when the server is accessing it self. Could you please check it? Best regards, Juraj Ondrus


Member	lancetek - 3/14/2013 3:14:50 AM RE:Kentico Scheduler with SSL Thanks for the reply - the server only has one external IP, and the SSL cert is bound to it. I think it's definitely some problem with scheduling and self-signed certs - when I installed a proper certificate, the scheduler started working again without errors.


Member	dmitry.k-markerstudio - 3/14/2013 2:58:34 PM RE:Kentico Scheduler with SSL yes, have exactly the same issue. sometimes it starts to work after iisreset, sometimes not.


Kentico Support	kentico_jurajo - 3/19/2013 10:46:35 AM RE:Kentico Scheduler with SSL Hi, I have been testing this for few days and so far the scheduler seems to be working fine. It is definitely something odd going on there. I would need to have more details about the day to day usage of the CMS - it seems it happens under some circumstances only. Best regards, Juraj Ondrus