Could not establish trust relationship for the SSL/TLS secure channel with Invoke-Webrequest from PowerShell

Question

When I try to use Invoke-WebRequest on https ,I'm getting some weird error:

"Invoke-WebRequest : The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel."

It's My Code:

   [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls
    $url = "https://X.X.X.X:4343/officescan/console/html/cgi/cgiChkMasterPwd.exe"
    $r = Invoke-WebRequest $url -SessionVariable office

Any advice for me ?? Thanks a lot.

Possible duplicate of [Powershell v3 Invoke-WebRequest HTTPS error](https://stackoverflow.com/questions/11696944/powershell-v3-invoke-webrequest-https-error) — Sage Pourpre, Sep 13 '17 at 02:31
See the accepted answer: https://stackoverflow.com/a/15841856/934946 — Sage Pourpre, Sep 13 '17 at 02:31
Basically, if your SSL certificate is invalid or self-signed, you will have this error but you can "trust" all SSL certificate for your script so the error won't appear. — Sage Pourpre, Sep 13 '17 at 02:32

score 0 · Answer 1 · answered Sep 07 '21 at 13:19

Of course it is an issue with an invalid certificate (autosigned?, expired?) if using Powershell 7+ simply use the new parameter

Invoke-WebRequest -Uri 'https://trees.com/' -SkipCertificateCheck

if using Powershell 5.1 it is a bit harder:

$code= @"
        using System.Net;
        using System.Security.Cryptography.X509Certificates;
        public class TrustAllCertsPolicy : ICertificatePolicy {
            public bool CheckValidationResult(ServicePoint srvPoint, X509Certificate certificate, WebRequest request, int certificateProblem) {
                return true;
            }
        }
"@
Add-Type -TypeDefinition $code -Language CSharp
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy
Invoke-WebRequest -Uri 'https://trees.com/'

Tiago Martins Peres · Answer 2 · 2020-07-20T10:04:46.477

You can also get that problem if you're using https:// in the Uri and the url is available through http://. More specifically, use

Invoke-WebRequest -Uri 'https://trees.com/'

and will get the following error

Invoke-WebRequest : The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

Then, if you use

Invoke-WebRequest -Uri 'trees.com'

or if you use

Invoke-WebRequest -Uri 'http://trees.com'

will work fine

Could not establish trust relationship for the SSL/TLS secure channel with Invoke-Webrequest from PowerShell

2 Answers2