Install certificates on client when consuming a WCF service with WSHttpBinding, Certificate Authentication and Message Security? -
I have created a WCF service that should be consumed outside of my domain, then I have the certificate authentication and the message With the decision to use WSHttpBinding security. I have created a self-signed certificate named "Test and Dave Root Authority" using Mekrt and signed two certificates using the same tools I like this with < / p> on your PC with MMC I added paper 3 certificates to trust people and "I -ir LocalMachine -sp -is" trusted root certificate authorities on the local machine account. I called the WCF service in IE and it was displayed correctly. I created a test app on another computer and added the service as a reference about it. I exported the secret key with WCFServiceClient and added the imported and trusted folders mentioned above on the current account on the second machine. My app.config section for WCF in the Client application section looks like this: When I wanted to test an app on another computer, it failed because he said that WcfServiceServer was not in the trusted people's folder I expected that error Was not the only solution to consume the service from the test app, it was to export the WCfServiceServer certificate and install it on another machine and it was available in the user friendly user area. Was add. Is it possible to deliver the WCFServiceServer certificate to the client, only WCfServiceClient certificate and to avoid app access to the service correctly? My second question is: In a production environment, I should buy an SSL certificate and along with the above two other certifications (one for another customer for the service) has been given above and Pass the client / server side to remove the steps described above? Thank you in advance I am the total noob in WCF
makecert -n PE "CN = WcfServiceServer" I -sr LocalMachine single SHA1 -sky Exchange -eku Lk3k6klk5k5k7k3kl-in "Test and Dev root Authority" -ss -is My -ir LocalMachine -sp "Microsoft RSA Schannel Cryptographic Provider" -sy 12 WcfServiceServer.cer makecert PE- n "CN = WcfServiceClient" -ss my -sr LocalMachine single SHA1 -sky Exchange -eku Lk3k6klk5k5k7k3kl-in "Test and Dev Root Authority Microsoft RSA SChannel Cryptographic Provider" -sy 12 WcfServiceClient.cer < / code>
& lt; Customers & gt; & Lt; endpoint address = "http: //otherpc/WcfTest/Service.svc" binding = "wsHttpBinding" bindingConfiguration = "WSHttpBinding_IServices" contract = "WcfTest.IServices" name = "WSHttpBinding_IServices" behaviorConfiguration = "CustomBehavior" & gt; & Lt; Identity & gt; & Lt; Dns value = "wcfServiceServer" /> & Lt; / Identification & gt; & Lt; / Endpoint & gt; & Lt; / Customer & gt; & Lt; Behavior & gt; & Lt; Endpoint beehaviors & gt; & Lt; Behavior name = "custom carrier" & gt; & Lt; ClientCredentials & gt; & Lt; Client authentication search value = "WcfServiceClient" x509FindType = "FindBySubjectName" storeLocation = "CurrentUser" storeName = "my" / & gt; & Lt; ServiceCertificate & gt; & Lt; Validation Certificate ValidityMode = "Peertrust" /> & Lt; / ServiceCertificate & gt; & Lt; / ClientCredentials & gt; & Lt; / Behavior & gt; & Lt; / EndpointBehaviors & gt; & Lt; / Behavior & gt; & Lt; /system.serviceModel>
Comments
Post a Comment