Tuesday, October 5, 2010

Invalid SKI in X.509 certificate


This one is rare but may happen when you get a malformed x.509 certificate.
Upon sending a request your WCF proxy / server will throw this:

Error: The length of this argument must be greater than 0.
Parameter name: identificationData

The reason is that the SubjectKeyIdentifier extension in the X.509 certificate is invalid. It is not empty (which is ok) and does not contain a legal value either. It is just malformed.

The only solution here is to use a different valid certificate.


What's next? get this blog rss updates or register for mail updates!