473,408 Members | 2,734 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,408 software developers and data experts.

WCF Certificate Authentication Problems

Hi,
I am trying to configure my service to authenticate clients using
certificates.
Here is the relevant portion of the web.config:
<system.serviceModel>
<services>
<service behaviorConfiguration="returnFaults" name="WCFSecureService">
<endpoint binding="wsHttpBinding"
bindingConfiguration="TransportSecurity"
contract="IWCFSecureService"/>
<endpoint address="mex"
binding="mexHttpsBinding"
name="MetadataBinding"
contract="IMetadataExchange"/>
</service>
</services>

<behaviors>
<serviceBehaviors>
<behavior name="returnFaults">
<serviceDebug includeExceptionDetailInFaults="true"/>
<serviceMetadata httpsGetEnabled="true"/>
<serviceTimeouts/>
</behavior>
</serviceBehaviors>
</behaviors>

<bindings>
<wsHttpBinding>
<binding name="TransportSecurity">
<security mode="Transport">
<transport clientCredentialType="Certificate"/>
</security>
</binding>
</wsHttpBinding>
</bindings>
</system.serviceModel>

When testing this service I am getting the following exception:
The SSL settings for the service 'None' does not match those of the IIS
'Ssl, SslNegotiateCert, SslRequireCert'.
Prior to the exception I am being prompted to select a certificate from the
list.

I am hosting this service in IIS and the virtual directory for this serice
is configured with the following settings:
Require secure channel (IIS is setup with a certificate).
Client Certificate -Require client certificates.

I assume that the issue is somewhere around mismatch between IIS
configuation and Service configuration, but I am unable to find documentation
on how those two should be configured in this scenario.

Thanks in advance.
Alex.
May 28 '07 #1
0 2211

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: Dennis.Hoffman | last post by:
I have been using XML-RPC to get information from one of our remote servers. To improve security, the server now has a certificate installed, and when I try to access it, I get an 'Unauthorized'...
0
by: Joey Edelstein | last post by:
Hi, We are trying to add a Client Certificate support for our web app that emulates a hardware device web app. The hardware uses a 2 factors authentication, which requires a Web Service client...
4
by: Guru | last post by:
I have a problem to enroll certificates with "Certificate Type: Computer" by using the CCertRequest object. Beforehand I create a Certificate Signing Request via Cenroll.createPKCS10(). The...
1
by: jnet | last post by:
Hi, How Do I retrieve the mapped account to a client certificate in .NET? I have multi certificates distributed to different clients; I want to know from whom the request is coming, so I can load...
0
by: blackjack2150 | last post by:
Hi! Just one question. I'm writing a web service client in .NET with C#. In order to use this ws's operations the client must be authenticated by providing a registered certificate to the server. ...
0
by: Sinex | last post by:
Hi, Am developing a web service that is gonna be consumed by a client over https. I'm using certificates to get the mutual authentication in place. On the server side, I want my service to be able...
0
AnuSumesh
by: AnuSumesh | last post by:
Hi all, I want to use certificate authentication for my site. I have installed CA on my server which is responsible for issuing the certificates to client machine on request. I want that...
1
by: =?Utf-8?B?Umljaw==?= | last post by:
I am developing a WCF based app on Vista using IIS 7.0 but it will be deployed on Microsoft Server 2003 with IIS 6.0. The app uses WSHttpBinding and mutual Certificate authentication. The app works...
1
by: Binoy | last post by:
Hi We have two server SSL certificates from Thawte. We set up these two SSL in the same server. Now, we want to access a web service hosted by one of our customer in their
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.