Building secure webservices using 2 way SSL

[Shelby]

Hi,

I'm doing some research on webservices using 2 way SSL.
It is Application-to-Application security.
Basically SERVER_SAP is hosting the webservice and SERVER_CLIENT is
consuming the webservice using a console.

So 2 way SSL means that SERVER_CLIENT need to present his certificate to
SERVER_SAP too.

In terms of coding,
For SERVER_CLIENT to send the certificate, I make use of the
X509Certificate class.
webservice.ClientCertificate.Add(myCert);

For SERVER_SAP to authenticate the received certificate, how should the
coding be?
In the IIS for SERVER_SAP, I have set the webservice application to "Require
SSL" and "Require Client Certificate".

Thanks
Shel

[Antonio Dias]

you don't need to do anything. it there's any problem with the certificate
the client will receive an exception. otherwise everything should work
fine.

On Sun, 28 Aug 2005 07:19:21 +0100, Shelby <sh****@singnet.com.sg> wrote:

Hi,

I'm doing some research on webservices using 2 way SSL.
It is Application-to-Application security.
Basically SERVER_SAP is hosting the webservice and SERVER_CLIENT is
consuming the webservice using a console.

So 2 way SSL means that SERVER_CLIENT need to present his certificate to
SERVER_SAP too.

In terms of coding,
For SERVER_CLIENT to send the certificate, I make use of the
X509Certificate class.
webservice.ClientCertificate.Add(myCert);

For SERVER_SAP to authenticate the received certificate, how should
the
coding be?
In the IIS for SERVER_SAP, I have set the webservice application to
"Require
SSL" and "Require Client Certificate".

Thanks
Shel

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/