By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
424,687 Members | 1,989 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 424,687 IT Pros & Developers. It's quick & easy.

x.509 Certificates

P: n/a
I have to write an asp.net app that uses a web service requiring x.509
certificates. Are there any good docs on how to do this both in code and on
the server. Most of the stuff I'm finding through google is old 1.1 docs.
I have the certificate.

--
Regards,
Gary Blakely
Aug 24 '08 #1
Share this Question
Share on Google+
5 Replies


P: n/a
Much of that will still work, although another option is to look at WCF docs
with SOAP as the transport mechanism. The consumption is very similar and it
may also convince you that WCF is a better model for you, as you can create
binary contracts for your own consumption, while still leaving the SOAP
contracts for people outside of your domain.

--
Gregory A. Beamer
MVP, MCP: +I, SE, SD, DBA

Subscribe to my blog
http://feeds.feedburner.com/GregoryBeamer#

or just read it:
http://feeds.feedburner.com/GregoryBeamer

********************************************
| Think outside the box! |
********************************************
"GaryDean" <gd**********@newsgroup.nospamwrote in message
news:eo**************@TK2MSFTNGP06.phx.gbl...
>I have to write an asp.net app that uses a web service requiring x.509
certificates. Are there any good docs on how to do this both in code and
on the server. Most of the stuff I'm finding through google is old 1.1
docs. I have the certificate.

--
Regards,
Gary Blakely

Aug 25 '08 #2

P: n/a
Hi Gary,

As for using Certificate in Webservice, I'd like to confirm the detailed
problem scenario in your environment.

Generally, you can use x509 certificate for authentication via using the
https/ssl transport layer security. For example, you can setup the
webservice in IIS to se ssl/https. And you can supply certificate in client
code (if server-side require client to provide certificate). Here are some
reference article on this:
#How to call a Web service by using a client certificate for authentication
in an ASP.NET Web application
http://support.microsoft.com/?id=901183

#Using client certificates with ASP.NET
http://geekswithblogs.net/lorint/arc.../30/64516.aspx

If you want to use X509 certificate to perform custom security (such as
encryption or signing), ASP.NET webservice doesn't directly certificate
integrity. There is an add-on component called "Web Service Enhancement"
(so far the latest version is 3.0 for .net framework 2.0). You can use it
to add certiciate and message layer securityt functionality for your
Webservice:

#Security Features in WSE 3.0
http://msdn.microsoft.com/en-us/magazine/cc300773.aspx

#Implementing Message Layer Security with X.509 Certificates in WSE 3.0
http://msdn.microsoft.com/en-us/library/aa480581.aspx

BTW, will WCF also be a possible option for you as Gregory suggested? So
far WSE is not updating and WCF provide more support on security such as
certificate.
Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/...tance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
>From: "GaryDean" <gd**********@newsgroup.nospam>
Subject: x.509 Certificates
Date: Sun, 24 Aug 2008 13:40:17 -0700
>
I have to write an asp.net app that uses a web service requiring x.509
certificates. Are there any good docs on how to do this both in code and
on
>the server. Most of the stuff I'm finding through google is old 1.1 docs.
I have the certificate.

--
Regards,
Gary Blakely
Aug 25 '08 #3

P: n/a
Steven:
The article 901183 is one of those excellent "how to" articles but, like all
the others, it is for WSE 2.0. All I can find for WSE 3.0 is MSDN docs and
a book (that I ordered). Maybe this is the time to jump into WCF. Thanks
for all these links.

--
Regards,
Gary Blakely
"Steven Cheng [MSFT]" <st*****@online.microsoft.comwrote in message
news:rH**************@TK2MSFTNGHUB02.phx.gbl...
Hi Gary,

As for using Certificate in Webservice, I'd like to confirm the detailed
problem scenario in your environment.

Generally, you can use x509 certificate for authentication via using the
https/ssl transport layer security. For example, you can setup the
webservice in IIS to se ssl/https. And you can supply certificate in
client
code (if server-side require client to provide certificate). Here are some
reference article on this:
#How to call a Web service by using a client certificate for
authentication
in an ASP.NET Web application
http://support.microsoft.com/?id=901183

#Using client certificates with ASP.NET
http://geekswithblogs.net/lorint/arc.../30/64516.aspx

If you want to use X509 certificate to perform custom security (such as
encryption or signing), ASP.NET webservice doesn't directly certificate
integrity. There is an add-on component called "Web Service Enhancement"
(so far the latest version is 3.0 for .net framework 2.0). You can use it
to add certiciate and message layer securityt functionality for your
Webservice:

#Security Features in WSE 3.0
http://msdn.microsoft.com/en-us/magazine/cc300773.aspx

#Implementing Message Layer Security with X.509 Certificates in WSE 3.0
http://msdn.microsoft.com/en-us/library/aa480581.aspx

BTW, will WCF also be a possible option for you as Gregory suggested? So
far WSE is not updating and WCF provide more support on security such as
certificate.
Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/...tance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.


--------------------
>>From: "GaryDean" <gd**********@newsgroup.nospam>
Subject: x.509 Certificates
Date: Sun, 24 Aug 2008 13:40:17 -0700
>>
I have to write an asp.net app that uses a web service requiring x.509
certificates. Are there any good docs on how to do this both in code and
on
>>the server. Most of the stuff I'm finding through google is old 1.1 docs.
I have the certificate.

--
Regards,
Gary Blakely

Aug 25 '08 #4

P: n/a
Thanks for your reply Gary,

For WSE 3.0, most of the examples and quick start reference has been
included in the SDK (document and samples), you can download it and install
with full version to get them.

#Web Services Enhancements (WSE) 3.0 for Microsoft .NET
http://www.microsoft.com/downloads/d...9fd-3a74-43c5-
8ec1-8d789091255d&displaylang=en

and here is another blog entry which include some further get started
resource:

#So you want to learn WSE 3.0? A short primer on how and where to start.
http://blogs.msdn.com/mfussell/archi...25/607820.aspx

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.
--------
>From: "GaryDean" <gd**********@newsgroup.nospam>
References: <eo**************@TK2MSFTNGP06.phx.gbl>
<rH**************@TK2MSFTNGHUB02.phx.gbl>
>Subject: Re: x.509 Certificates
Date: Mon, 25 Aug 2008 06:44:50 -0700
>
Steven:
The article 901183 is one of those excellent "how to" articles but, like
all
>the others, it is for WSE 2.0. All I can find for WSE 3.0 is MSDN docs
and
>a book (that I ordered). Maybe this is the time to jump into WCF. Thanks
for all these links.

--
Regards,
Gary Blakely
"Steven Cheng [MSFT]" <st*****@online.microsoft.comwrote in message
news:rH**************@TK2MSFTNGHUB02.phx.gbl...
>Hi Gary,

As for using Certificate in Webservice, I'd like to confirm the detailed
problem scenario in your environment.

Generally, you can use x509 certificate for authentication via using the
https/ssl transport layer security. For example, you can setup the
webservice in IIS to se ssl/https. And you can supply certificate in
client
code (if server-side require client to provide certificate). Here are
some
>reference article on this:
#How to call a Web service by using a client certificate for
authentication
in an ASP.NET Web application
http://support.microsoft.com/?id=901183

#Using client certificates with ASP.NET
http://geekswithblogs.net/lorint/arc.../30/64516.aspx

If you want to use X509 certificate to perform custom security (such as
encryption or signing), ASP.NET webservice doesn't directly certificate
integrity. There is an add-on component called "Web Service Enhancement"
(so far the latest version is 3.0 for .net framework 2.0). You can use
it
>to add certiciate and message layer securityt functionality for your
Webservice:

#Security Features in WSE 3.0
http://msdn.microsoft.com/en-us/magazine/cc300773.aspx

#Implementing Message Layer Security with X.509 Certificates in WSE 3.0
http://msdn.microsoft.com/en-us/library/aa480581.aspx

BTW, will WCF also be a possible option for you as Gregory suggested? So
far WSE is not updating and WCF provide more support on security such as
certificate.
Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you.
Please
>feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

================================================= =
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.
>>
Note: The MSDN Managed Newsgroup support offering is for non-urgent
issues
>where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each
follow
>up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/...tance&ln=en-us.
>================================================= =
This posting is provided "AS IS" with no warranties, and confers no
rights.


--------------------
>>>From: "GaryDean" <gd**********@newsgroup.nospam>
Subject: x.509 Certificates
Date: Sun, 24 Aug 2008 13:40:17 -0700
>>>
I have to write an asp.net app that uses a web service requiring x.509
certificates. Are there any good docs on how to do this both in code and
on
>>>the server. Most of the stuff I'm finding through google is old 1.1
docs.
>>>I have the certificate.

--
Regards,
Gary Blakely


Aug 26 '08 #5

P: n/a
Hi Gary,

Have you tried the examples in the WSE 3.0 sdk or do you have any further
questions on this?

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Content-Type: text/plain
Content-Transfer-Encoding: 7bit
From: st*****@online.microsoft.com (Steven Cheng [MSFT])
Organization: Microsoft
Date: Tue, 26 Aug 2008 02:22:28 GMT
Subject: Re: x.509 Certificates
>Thanks for your reply Gary,

For WSE 3.0, most of the examples and quick start reference has been
included in the SDK (document and samples), you can download it and
install
>with full version to get them.

#Web Services Enhancements (WSE) 3.0 for Microsoft .NET
http://www.microsoft.com/downloads/d...09fd-3a74-43c5
-
>8ec1-8d789091255d&displaylang=en

and here is another blog entry which include some further get started
resource:

#So you want to learn WSE 3.0? A short primer on how and where to start.
http://blogs.msdn.com/mfussell/archi...25/607820.aspx

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.
>>>>>



Aug 28 '08 #6

This discussion thread is closed

Replies have been disabled for this discussion.