SSL and web Services

[Thomas Connolly]

I have a web Service that is accessing an Oracle back-end
database through a Forte layer via SOAP and XML. The
clients access the web service through SSL and it returns
the data it has recieved from the Forte layer. On test
machines (Windows 2000 Pro) there is no problem. The SSL
works fine, the web service returns the pages and data
without any problems. When I deployed the application to
the server (Win2K Server) the page returns with no data.
Somewhere, there is a problem retriving data from the
Forte layer to the Web Service. can this be an SSL
issue? Has anyone had any experience with anything such
as this? Any help or ideas would be greatly appreciated.
Brainstorm ideas welcome also!!!

Thanks in advance,
Tom

[Thomas Connolly]

Steve,
I really appreciate your reply. As I am a novice at SSL,
can you give some more detail? For example, namespaces to
add, where this code goes and what it does, etc.

Again, thank you.

Tom

-----Original Message-----
I don't believe IIS in windows Pro supports true SSL. Only Windows Server does.You may need some code like this to support the web service call with SSL enabled:

'Set the web service's Credentials to Windows credentials of the user calling this application
wsProxy.Credentials = CredentialCache.DefaultCredentials

'Set the client's certificate

If sCertName.Length <> 0 Then

Dim x509 As X509Certificate = X509Certificate.CreateFromCertFile(sCertName)
wsProxy.ClientCertificates.Add(x509)

End If
--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net

"Thomas Connolly" <th*************@us.ssiworldwide.com>

wrote in message news:042801c35548$71346010
$a*******@phx.gbl...

I have a web Service that is accessing an Oracle back- end database through a Forte layer via SOAP and XML. The
clients access the web service through SSL and it returns the data it has recieved from the Forte layer. On test
machines (Windows 2000 Pro) there is no problem. The SSL works fine, the web service returns the pages and data
without any problems. When I deployed the application to the server (Win2K Server) the page returns with no data. Somewhere, there is a problem retriving data from the
Forte layer to the Web Service. can this be an SSL
issue? Has anyone had any experience with anything such as this? Any help or ideas would be greatly appreciated. Brainstorm ideas welcome also!!!

Thanks in advance,
Tom

[Steve C. Orr, MCSD]

This code goes right before you call the web service. In this example the
web service reference is named wsProxy.
The namespace you need is System.Security.Cryptography.X509Certificates
This code takes care of the client certificate "stuff" that is needed on the
client side for secure communication. Normally, when surfing the web, the
web browser would take care of this. But in this case the web service
client is not a web browser so you must do it manually.

--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net
"Thomas Connolly" <th*************@us.ssiworldwide.com> wrote in message
news:36****************************@phx.gbl...

Steve,
I really appreciate your reply. As I am a novice at SSL,
can you give some more detail? For example, namespaces to
add, where this code goes and what it does, etc.

Again, thank you.

Tom

-----Original Message-----
I don't believe IIS in windows Pro supports true SSL.

Only Windows Server does.

You may need some code like this to support the web

service call with SSL enabled:

'Set the web service's Credentials to Windows credentials

of the user calling this application

wsProxy.Credentials = CredentialCache.DefaultCredentials

'Set the client's certificate

If sCertName.Length <> 0 Then

Dim x509 As X509Certificate =

X509Certificate.CreateFromCertFile(sCertName)

wsProxy.ClientCertificates.Add(x509)

End If
--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net

"Thomas Connolly" <th*************@us.ssiworldwide.com>

wrote in message news:042801c35548$71346010
$a*******@phx.gbl...

I have a web Service that is accessing an Oracle back- end database through a Forte layer via SOAP and XML. The
clients access the web service through SSL and it returns the data it has recieved from the Forte layer. On test
machines (Windows 2000 Pro) there is no problem. The SSL works fine, the web service returns the pages and data
without any problems. When I deployed the application to the server (Win2K Server) the page returns with no data. Somewhere, there is a problem retriving data from the
Forte layer to the Web Service. can this be an SSL
issue? Has anyone had any experience with anything such as this? Any help or ideas would be greatly appreciated. Brainstorm ideas welcome also!!!

Thanks in advance,
Tom

[Thomas Connolly]

Hello again Steve,
Can you please explain to me what sCertName is and where
it comes from?

Thank you,
Thomas

-----Original Message-----
This code goes right before you call the web service. In this example theweb service reference is named wsProxy.
The namespace you need is System.Security.Cryptography.X509CertificatesThis code takes care of the client certificate "stuff" that is needed on theclient side for secure communication. Normally, when surfing the web, theweb browser would take care of this. But in this case the web serviceclient is not a web browser so you must do it manually.

--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net
"Thomas Connolly" <th*************@us.ssiworldwide.com> wrote in messagenews:36****************************@phx.gbl...

Steve,
I really appreciate your reply. As I am a novice at SSL, can you give some more detail? For example, namespaces to add, where this code goes and what it does, etc.

Again, thank you.

Tom

>-----Original Message-----
>I don't believe IIS in windows Pro supports true SSL.

Only Windows Server does.

>You may need some code like this to support the web

service call with SSL enabled:

>
>
>'Set the web service's Credentials to Windows credentials

of the user calling this application

>
>wsProxy.Credentials =

CredentialCache.DefaultCredentials >
>
>
>'Set the client's certificate
>
>If sCertName.Length <> 0 Then
>
> Dim x509 As X509Certificate =

X509Certificate.CreateFromCertFile(sCertName)

>
> wsProxy.ClientCertificates.Add(x509)
>
>End If
>
>
>--
>I hope this helps,
>Steve C. Orr, MCSD
>http://Steve.Orr.net
>
>
>
>
>
>"Thomas Connolly" <th*************@us.ssiworldwide.com>

wrote in message news:042801c35548$71346010
$a*******@phx.gbl...

>> I have a web Service that is accessing an Oracle back- end

>> database through a Forte layer via SOAP and XML. The
>> clients access the web service through SSL and it

returns

>> the data it has recieved from the Forte layer. On

test >> machines (Windows 2000 Pro) there is no problem. The

SSL

>> works fine, the web service returns the pages and data >> without any problems. When I deployed the

application to

>> the server (Win2K Server) the page returns with no

data.

>> Somewhere, there is a problem retriving data from the
>> Forte layer to the Web Service. can this be an SSL
>> issue? Has anyone had any experience with anything

such

>> as this? Any help or ideas would be greatly

appreciated.

>> Brainstorm ideas welcome also!!!
>>
>> Thanks in advance,
>> Tom

.

[Steve C. Orr, MCSD]

Well, it's the name of your cert.
Here are some links that should help you with the process of setting up SSL
in your app:

Step-by-Step Guide to Managing Active Directory
http://www.microsoft.com/windows2000...manadsteps.asp

Step-by-Step Guide to Setting up a Certification Authority
http://www.microsoft.com/windows2000...setupsteps.asp

Step-by-Step Guide to Certificate Services Web Pages
http://www.microsoft.com/windows2000...cawebsteps.asp

Step-by-Step Guide to Advanced Certificate Management
http://www.microsoft.com/windows2000...vcertsteps.asp

Step-by-Step Guide to Mapping Certificates to User Accounts
http://www.microsoft.com/windows2000...ppingcerts.asp

--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net
"Thomas Connolly" <th*************@us.ssiworldwide.com> wrote in message
news:00****************************@phx.gbl...

Hello again Steve,
Can you please explain to me what sCertName is and where
it comes from?

Thank you,
Thomas

-----Original Message-----
This code goes right before you call the web service. In

this example the

web service reference is named wsProxy.
The namespace you need is

System.Security.Cryptography.X509Certificates

This code takes care of the client certificate "stuff"

that is needed on the

client side for secure communication. Normally, when

surfing the web, the

web browser would take care of this. But in this case

the web service

client is not a web browser so you must do it manually.

--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net
"Thomas Connolly" <th*************@us.ssiworldwide.com>

wrote in message

news:36****************************@phx.gbl...

Steve,
I really appreciate your reply. As I am a novice at SSL, can you give some more detail? For example, namespaces to add, where this code goes and what it does, etc.

Again, thank you.

Tom
>-----Original Message-----
>I don't believe IIS in windows Pro supports true SSL.
Only Windows Server does.
>You may need some code like this to support the web
service call with SSL enabled:
>
>
>'Set the web service's Credentials to Windows credentials of the user calling this application
>
>wsProxy.Credentials = CredentialCache.DefaultCredentials >
>
>
>'Set the client's certificate
>
>If sCertName.Length <> 0 Then
>
> Dim x509 As X509Certificate =
X509Certificate.CreateFromCertFile(sCertName)
>
> wsProxy.ClientCertificates.Add(x509)
>
>End If
>
>
>--
>I hope this helps,
>Steve C. Orr, MCSD
>http://Steve.Orr.net
>
>
>
>
>
>"Thomas Connolly" <th*************@us.ssiworldwide.com>
wrote in message news:042801c35548$71346010
$a*******@phx.gbl...
>> I have a web Service that is accessing an Oracle back- end
>> database through a Forte layer via SOAP and XML. The
>> clients access the web service through SSL and it
returns
>> the data it has recieved from the Forte layer. On test >> machines (Windows 2000 Pro) there is no problem. The
SSL
>> works fine, the web service returns the pages and data >> without any problems. When I deployed the application to
>> the server (Win2K Server) the page returns with no
data.
>> Somewhere, there is a problem retriving data from the
>> Forte layer to the Web Service. can this be an SSL
>> issue? Has anyone had any experience with anything
such
>> as this? Any help or ideas would be greatly
appreciated.
>> Brainstorm ideas welcome also!!!
>>
>> Thanks in advance,
>> Tom

.

[Joerg Jooss]

"Steve C. Orr, MCSD" spoke:

I don't believe IIS in windows Pro supports true SSL.

What's "true" SSL? Provided you have a certificate, you can run IIS on
Pro with SSL.

Cheers,
--
Joerg Jooss
jo*********@gmx.net