c# - WCF service dns identity on client doesn't work -


trying communicate soap service via https. service has certificate. works ok, if install certificate local storage or write it's encoded content in config as

<certificate encodedvalue="ccbf......"/>

but don't want have hard reference in client service certificate data, due expire , changed. want accept service certificate cn or someway that.

according msdn client.endpoint.identity.dns value can used in such case. if dns.value==cn in service certificate, connection should ok.

but doesn't.

when open connection, exception:

client.endpoint.contract.protectionlevel = system.net.security.protectionlevel.sign; client.open();

additional information: service certificate not provided target 'https://sss.myhost.com'. specify service certificate in clientcredentials.

<configuration>     <startup>          <supportedruntime version="v4.0" sku=".netframework,version=v4.5" />     </startup>     <system.servicemodel>         <bindings>           <custombinding>          <binding>                 <security authenticationmode="mutualcertificate"                           enableunsecuredresponse="true"                           messagesecurityversion="wssecurity10wstrustfebruary2005wssecureconversationfebruary2005wssecuritypolicy11basicsecurityprofile10">                   <secureconversationbootstrap  />                 </security>                 <textmessageencoding messageversion="soap11" />                 <httpstransport />               </binding>           </custombinding>         </bindings>       <behaviors>         <endpointbehaviors>           <behavior>             <clientcredentials>               <clientcertificate findvalue="foo" storename="my" storelocation="currentuser" x509findtype="findbyissuername"/>               <servicecertificate>                 <!--<defaultcertificate storelocation="localmachine" x509findtype="findbyissuername" storename="root" findvalue="myissuername"  />-->               </servicecertificate>             </clientcredentials>           </behavior>         </endpointbehaviors>       </behaviors>         <client>           <endpoint address="https://sss.myhost.com"               binding="custombinding"               contract="rs.instancemanagerporttype" name="instancemanagerport">             <identity>               <!--<certificate encodedvalue="ccbf......"/>-->               <dns value="*.myhost.com"/>             </identity>           </endpoint>         </client>     </system.servicemodel> </configuration>

i believe you'll have implement own certificate validation.

<behavior name="credentialconfiguration">   <clientcredentials>     <servicecertificate>       <authentication         certificatevalidationmode="custom"         customcertificatevalidatortype="your validator"/>     </servicecertificate>   </clientcredentials> </behavior>

where validator assembly-qualified type name of class implements x509certificatevalidator. there have full freedom of validating whatever want - cn, thumbprint, etc.


Comments

Post a Comment

Popular posts from this blog

sublimetext3 - what keyboard shortcut is to comment/uncomment for this script tag in sublime -

Image
i have script tag in code, keyboard shortcut comment/uncomment script tag in sublime. after selecting script open , close tag. <script src="http://code.jquery.com/jquery-latest.min.js" type="text/javascript"> </script> i pressing ctrl + shift + / , getting this /*<script src="http://code.jquery.com/jquery-latest.min.js" type="text/javascript"> </script>*/ also pressed ctrl + / , got this // <script src="http://code.jquery.com/jquery-latest.min.js" type="text/javascript"> // </script> instead of <!-- <script src="http://code.jquery.com/jquery-latest.min.js" type="text/javascript"> </script> --> script open , close tag in 2 lines not in 1 line , not have spaces too. for mac,high light lines want comment. hold 'command , / ' commented. for windows: high line or select lines ,then hold ctrl + / if not work: ...
Read more

java - No use of nillable="0" in SOAP Webservice -

i have received xsd 3rd party supplier generated java based system; used create soap endpoint receive data transfers. xsd not make use of nillable attribute defined within w3c/xsd namespace, example: <xs:complextype name="customer"> <xs:sequence> <xs:element minoccurs="1" maxoccurs="1" name="id" type="xs:integer"/> <xs:element minoccurs="0" maxoccurs="1" name="titleid" type="xs:integer"/> <xs:element minoccurs="0" maxoccurs="1" name="firstname" type="xs:string"/> <xs:element minoccurs="0" maxoccurs="1" name="familyname" type="xs:string"/> <xs:element minoccurs="0" maxoccurs="1" name="previousname" type="xs:string"/> <xs:element minoccurs="0" maxoccurs="1" nam...
Read more

ubuntu - Laravel 5.2 quickstart guide gives Not Found Error -

edit: think problem due not setting apache properly, these 2 links helped me. solution: http://laravel.io/forum/06-11-2014-not-found-but-route-exists https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-virtual-hosts-on-ubuntu-14-04-lts end edit i'm following laravel 5.2 quickstart guide. https://laravel.com/docs/5.2/quickstart i'm running ubuntu 14.04.2 the website runs initially, when click on add task button run 404 not found error. as per guide run following commands setup complete quickstart project. git clone https://github.com/laravel/quickstart-basic quickstart cd quickstart composer install php artisan migrate additionally run following commands because i'm on ubuntu server: sudo chown -r www-data.www-data quickstart sudo chmod -r 755 quickstart sudo chmod 777 quickstart/storage the routes.php file looks like: <?php use app\task; use illuminate\http\request; route::group(['middleware' => ['web']]...
Read more