I'm migrating my app to WSE 3.0. In the past I used WSE 1.0 and 2.0 to
encrypt my requests and responses using a private shared key, and not using
X.509 due to perceived difficulties therein. With each release of WSE,
however, I find myself having to re-implement my encryption scheme to make it
work, since it's not using the recommended X.509 certs.
Is it possible to use X.509 in a "private" environment, i.e. closed network
(no internet), between one server and one or more clients? I'm assuming this
would require the IIS Web Server to act as a Certificate Authority, and
essentially authenticate the certs used in the requests and responses to/from
itself.
If this method is possible, can I create a certificate and then install it
on all servers and clients that I deploy my solution to? How do you create
said certificate?
Thanks,
John Becker
