473,385 Members | 1,492 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,385 software developers and data experts.

x.509 Certificates - one more time

I posted an earlier message on this subject and received links to some old
1.1 docs that didn't do any good. Since then I fouund a book on WSE 3.0
that tells, in some detail, how to develop a web service client where x.509
certificates are used.

I'm using the book "Web Service Security - patterns and practices" from
microsoft. (also available free as a pdf MS_WSS_Dec.pdf) On page 141 they
tell how to develop a Web Service Client using x.509. They do a very good
job of showing how to access the certificate store that all results in a
wse3policyCache.config file. Then they say the next step is "The client
signs the message using it's private key" - but they never show how to do
that.

Then, the following step is "The Client encrypts the message using the
service's public key" - but they never show how to do that either?

Can anyone help me out with this? I'm finding almost nothing on this issue.
Is no one really using x.509 certs?

Thanks,

Gary
--
Regards,
Gary Blakely
Sep 5 '08 #1
4 1486
WCF is all declarative. See if this helps:
http://www.theserverside.net/tt/arti...ringWCFService

--
Gregory A. Beamer
MVP, MCP: +I, SE, SD, DBA

Subscribe to my blog
http://feeds.feedburner.com/GregoryBeamer#

or just read it:
http://feeds.feedburner.com/GregoryBeamer

********************************************
| Think outside the box! |
********************************************
"GaryDean" <gd**********@newsgroup.nospamwrote in message
news:OV**************@TK2MSFTNGP06.phx.gbl...
>I posted an earlier message on this subject and received links to some old
1.1 docs that didn't do any good. Since then I fouund a book on WSE 3.0
that tells, in some detail, how to develop a web service client where x.509
certificates are used.

I'm using the book "Web Service Security - patterns and practices" from
microsoft. (also available free as a pdf MS_WSS_Dec.pdf) On page 141 they
tell how to develop a Web Service Client using x.509. They do a very good
job of showing how to access the certificate store that all results in a
wse3policyCache.config file. Then they say the next step is "The client
signs the message using it's private key" - but they never show how to do
that.

Then, the following step is "The Client encrypts the message using the
service's public key" - but they never show how to do that either?

Can anyone help me out with this? I'm finding almost nothing on this
issue. Is no one really using x.509 certs?

Thanks,

Gary
--
Regards,
Gary Blakely

Sep 5 '08 #2
Hi Gary,

As other members mentioned, if possible, we would always recommend you take
a look at WCF as that has been the current well equiped distribute
communication component.

For WSE 3.0, there are some article introducing how to use X509 certificate
for message secure(message layer security):

#Implementing Message Layer Security with X.509 Certificates in WSE 3.0
http://msdn.microsoft.com/en-us/library/aa480581.aspx

#<x509Element
http://msdn.microsoft.com/en-us/library/aa529251.aspx

In addition, I've also suggested you have a look at the samples in the WSE
3.0 sdk, that will give you a more clear view on how to configure a X509
service client and server.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/...tance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "GaryDean" <gd**********@newsgroup.nospam>
Subject: x.509 Certificates - one more time
Date: Thu, 4 Sep 2008 17:13:08 -0700
>
I posted an earlier message on this subject and received links to some old
1.1 docs that didn't do any good. Since then I fouund a book on WSE 3.0
that tells, in some detail, how to develop a web service client where
x.509
>certificates are used.

I'm using the book "Web Service Security - patterns and practices" from
microsoft. (also available free as a pdf MS_WSS_Dec.pdf) On page 141 they
tell how to develop a Web Service Client using x.509. They do a very good
job of showing how to access the certificate store that all results in a
wse3policyCache.config file. Then they say the next step is "The client
signs the message using it's private key" - but they never show how to do
that.

Then, the following step is "The Client encrypts the message using the
service's public key" - but they never show how to do that either?

Can anyone help me out with this? I'm finding almost nothing on this
issue.
>Is no one really using x.509 certs?

Thanks,

Gary
--
Regards,
Gary Blakely
Sep 5 '08 #3
That is an article on how to secure a WCF service. I'm writing a Web
Service Client using WSE (yes I know its obsolete) using an x.509 cert. The
article would be interesting if I were writing a WCF service.

--
Regards,
Gary Blakely
"Cowboy (Gregory A. Beamer)" <No************@comcast.netNoSpamMwrote in
message news:ug**************@TK2MSFTNGP05.phx.gbl...
WCF is all declarative. See if this helps:
http://www.theserverside.net/tt/arti...ringWCFService

--
Gregory A. Beamer
MVP, MCP: +I, SE, SD, DBA

Subscribe to my blog
http://feeds.feedburner.com/GregoryBeamer#

or just read it:
http://feeds.feedburner.com/GregoryBeamer

********************************************
| Think outside the box! |
********************************************
"GaryDean" <gd**********@newsgroup.nospamwrote in message
news:OV**************@TK2MSFTNGP06.phx.gbl...
>>I posted an earlier message on this subject and received links to some old
1.1 docs that didn't do any good. Since then I fouund a book on WSE 3.0
that tells, in some detail, how to develop a web service client where
x.509 certificates are used.

I'm using the book "Web Service Security - patterns and practices" from
microsoft. (also available free as a pdf MS_WSS_Dec.pdf) On page 141 they
tell how to develop a Web Service Client using x.509. They do a very
good job of showing how to access the certificate store that all results
in a wse3policyCache.config file. Then they say the next step is "The
client signs the message using it's private key" - but they never show
how to do that.

Then, the following step is "The Client encrypts the message using the
service's public key" - but they never show how to do that either?

Can anyone help me out with this? I'm finding almost nothing on this
issue. Is no one really using x.509 certs?

Thanks,

Gary
--
Regards,
Gary Blakely


Sep 6 '08 #4
Hi Gary,

Have you had a look at the WSE security aritlces I mentioned in previous
message?

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "GaryDean" <gd**********@newsgroup.nospam>
Subject: x.509 Certificates - one more time
Date: Thu, 4 Sep 2008 17:13:08 -0700
>
I'm using the book "Web Service Security - patterns and practices" from
microsoft. (also available free as a pdf MS_WSS_Dec.pdf) On page 141 they
tell how to develop a Web Service Client using x.509. They do a very good
job of showing how to access the certificate store that all results in a
wse3policyCache.config file. Then they say the next step is "The client
signs the message using it's private key" - but they never show how to do
that.

Then, the following step is "The Client encrypts the message using the
service's public key" - but they never show how to do that either?

Can anyone help me out with this? I'm finding almost nothing on this
issue.
>Is no one really using x.509 certs?

Thanks,

Gary
--
Regards,
Gary Blakely
Sep 8 '08 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: Next | last post by:
Hello, I sure could use someone's help : ) I need to authenticate users and securely upload files from laptops on the internet ( not on the same domain as server ) to a server on my domain....
0
by: Russ | last post by:
I have set up a C# web application that runs on my test Web Server (Windows 2003 Server, Web Edition). It in turn calls a web service running on the internal network. Now I want to issue a...
0
by: dinoo | last post by:
Can some body help me out? I am trying to use client certificates in a Webservice. But some how i am not able to make it. I went through the msdn resources but i think some one needs to help me...
2
by: Larry David | last post by:
Hi, This is one of those posts where not only do I not know the answer, I don't fully understand the *question* that I should be asking... but I'll try my best: I've designed a web site which...
5
by: | last post by:
Hi all, HttpWebRequest, and SoapHttpClientProtocol both expose a ClientCertificates property, which can hold multiple client certificates, but on the service side, it can only receive one client...
1
by: rds | last post by:
We are developing a smart client application which consumes web services. The web services are being secured with X509 certificates. During the development/testing phase we have been using the X509...
2
by: Rune Nergard | last post by:
I have tried to use the System.Security.Cryptography.Xml.SignedXml class to sign an Xml message with Xml-DSIG and using an Enveloped signature type and the sha1RSA algorithm. Everything works fine...
5
by: GaryDean | last post by:
I have to write an asp.net app that uses a web service requiring x.509 certificates. Are there any good docs on how to do this both in code and on the server. Most of the stuff I'm finding...
0
Frinavale
by: Frinavale | last post by:
I am currently developing a VB.NET application which consumes a Web Service (implemented in Java). I am hosting the Web Service using Apache Tomcat on my development machine (localhost). The web...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...
0
by: ryjfgjl | last post by:
In our work, we often need to import Excel data into databases (such as MySQL, SQL Server, Oracle) for data analysis and processing. Usually, we use database tools like Navicat or the Excel import...
0
by: taylorcarr | last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: aa123db | last post by:
Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.