Stack Overflow
Stack Overflow

Questions tagged [schannel]

91 questions
1
vote
0 answers

How to handle SEC_I_MESSAGE_FRAGMENT when performing a DTLS handshake via the SChannel SSPI?

When performing a DTLS handshake using the SChannel SSPI in Windows 10 - for which there is no documentation - how should the application handle a SEC_I_MESSAGE_FRAGMENT result from AcceptSecurityContext (ASC) or InitializeSecurityContext (ISC)? I…
Haddon CD.
  • 158
  • 6
1
vote
1 answer

Shutting Down an Schannel Connection

It is said that to shutdown a schannel connection following steps to be followed: 1)Call the ApplyControlToken function, specifying the SCHANNEL_SHUTDOWN control token. 2)After receiving an SEC_E_OK return value from ApplyControlToken, call the…
Liyanth Raj
  • 11
  • 2
1
vote
0 answers

Revocation certificate error when trying to pull GIT repo

I know there are a few similar posts to this but I have not been able to solve this with there answers. I tried git config —global http.schannelcheckrevoke false but I still get the error whether it’s set to true or false. fatal: unable to access…
Jerimiah Huston
  • 53
  • 5
1
vote
1 answer

curl error 35 : failed to receive handshake, SSL/TLS connection failed

When I try to execute this curl command : curl -v --key some_key_file.key --cert certificate_file.pem --show-error --header "Content-Type: application/json;charset=UTF-8" https://some-api/service I get the following error : curl: (35) schannel:…
Lucas Charbonnier
  • 381
  • 1
  • 10
1
vote
1 answer

What are the Schannel TLS fatal alert codes?

Where can I find a definition of the Windows Schannel fatal alerts codes that show up in Event Viewer? For instance: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40. A fatal alert was generated…
JD Brennan
  • 792
  • 1
  • 9
  • 19
1
vote
0 answers

Schannel alerts are not being sent

Can't get the SChannel alert messages to be sent to client while calling my WCF service. I've enabled the verbose logging of the SChannel alerts to the Event Viewer by setting the "EventLogging" DWORD in the Registry Editor to 0x0004 instead of…
Abollo
  • 66
  • 7
1
vote
0 answers

How to access system private keys from a virtual service account?

I'm working on a NT service that uses SChannel to support client TLS connections. Certificates are installed manually via Local Machine Certificate Manager (certlm.msc) into a custom cert store, called "Public Hub Interface". The service has already…
Luxabundus
  • 33
  • 4
1
vote
1 answer

Adding third party cipher suites that to conform to SSPI (Windows)

We have a socket class that currently uses schannel via SSPI calls (This is a legacy Windows desktop application). The problem is that our application has to support the cipher suite TLS_ECDHE_ECDSA_WITH _AES_128_CCM_8 and this is not available in…
virtore
  • 163
  • 1
  • 9
1
vote
1 answer

InitializeSecurityContext (Schannel) returns SEC_I_INCOMPLETE_CREDENTIALS unexpectedly

I have implemented a code for creating a secure connection using SSPI. I use it for sending mail over SMTP. It works fine with smtp.gmail.com and some other servers which I tried it with. But it doesn't work with smtp.live.com. The second call of…
CITBL
  • 1,326
  • 3
  • 17
  • 31
1
vote
0 answers

Failed SSL/TLS handshake

I have a .NET (WinForms) application running as a (test-)client for a SOAP service. The service requires that the client authenticates itself with a client certificate (like this MSDN example:…
Marcel van Tongeren
  • 11
  • 3
1
vote
0 answers

TLS for Windows Store and Windows 7+ Desktop

I want a client/server C++ application that can use TLS for secure communication, including client certificates, and potential to select and validate certificates myself. I have used Schannel to do this before, but the key InitializeSecurityContext…
Fire Lancer
  • 27,564
  • 26
  • 109
  • 168
1
vote
1 answer

TransmitFile + SChannel

I'm using the TransmitFile API with I/O completion ports for an efficient multithreaded file server on Windows. This all works fine, but I've now also implemented secure sockets using SChannel. Because TransmitFile streams the file directly to the…
Jamie M
  • 13
  • 2
1
vote
1 answer

Extract Certificate Chain from SChannel with C++ and CryptoApi/SChannel

Is it possible to extract the certificate chain sent by the remote computer in TLS 1.0 Handshake? The API QueryContextAttributes with SECPKG_ATTR_REMOTE_CERT_CONTEXT value, returns only the end certificate. Is possible to extract all the chain…
theWindowsUser
  • 15
  • 5
1
vote
1 answer

SChannel, SEC_E_ALGORITHM_MISMATCH (0x80090331)

Days of troubleshooting on this one, googling solutions & re-reading Microsoft documentation on the needed functions. Changing variables, retrying again and again. Help is very thoroughly appreciated, I'm sure it's not just me running into this. I…
karezza
  • 536
  • 5
  • 11
1
vote
1 answer

How to add SNI client hello extension using Schannel API?

I'm trying to add SNI to my client-side program (C/C++) that uses Microsoft SDK's Schannel API for TLS. I've searched everywhere but could not find any documentation on how Schannel supports SNI extension. I looked up the documentation for …
Anurag S Sharma
  • 301
  • 1
  • 10
1 2
3
4 5 6 7