why 'remoteCertificate' parameter is empty in LocalCertificateSelectionCallback method?

i wanna setup a SSL connection, but really don't know everything about SSL handshake rules and life cycle. i wrote a code

void main()
{
TcpClient client = new TcpClient("192.168.1.160", 4113);
SslStream sslStream = new SslStream(
                client.GetStream(),
                false,
                new RemoteCertificateValidationCallback(ValidateServerCertificate),
                new LocalCertificateSelectionCallback(localCertSelection)
                );
sslStream.AuthenticateAsClient(serverName);
}

public X509Certificate localCertSelection(object sender, string targetHost, X509CertificateCollection localCertificates, X509Certificate 开发者_StackOverflow社区remoteCertificate, string[] acceptableIssuers)
        {// why here 'remoteCertificate' parameter is empty? 'acceptableIssuers' and 'localCertificates' too
            string cert = "MIIEwjCCA6qgAwIBAgIBADANBgkqhkiG9w...";
            X509Certificate clientCert = new X509Certificate(System.Text.Encoding.ASCII.GetBytes(cert));
            return clientCert;
        }

public bool ValidateServerCertificate(
              object sender,
              X509Certificate certificate,
              X509Chain chain,
              SslPolicyErrors sslPolicyErrors)
        {
// 'certificate' has data now. it has come from server
            if (sslPolicyErrors == SslPolicyErrors.None)
                return true;

            Console.WriteLine("Certificate error: {0}", sslPolicyErrors);

            // Do not allow this client to communicate with unauthenticated servers.
            return false;
        }

when i run the code, program flow first goes to 'localCertSelection' method and then goes to 'ValidateServerCertificate' method.

in 'localCertSelection' method 'remoteCertificate' is empty , but in 'ValidateServerCertificate' method 'certificate' has data. it has come from server, but why 'sslPolicyErrors' is 'RemoteCertificateNameMismatch | RemoteCertificateChainErrors' ? what's wrong? what i have to do?

---

The RemoteCertificateNameMismatch error may occur if your "servername" are wrong. I mean that servername in

sslStream.AuthenticateAsClient(serverName); 

must be "192.168.1.160", the same as in

TcpClient client = new TcpClient("192.168.1.160", 4113);

The RemoteCertificateChainErrors happen if something wrong with your root certificate. When you create certificate you have to put appropriate host in CN, CN=192.168.1.160. And don't forget import your root certificate to "Trusted Root Certification Authorities".