Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / .NET SDK / December 2004

Tip: Looking for answers? Try searching our database.

Excessive Private Key access prompts when using SSL and web servic

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Keith - 15 Dec 2004 20:01 GMT
I'm having a problem using a X509 certificate for authentication.  I am using
a remote web service, via a web service proxy class (Visual Studio generated,
given the WSDL).  I access the cert and add it to the ClientCertificates
property of this proxy.  This all works fine.

When I first start up, I am prompted by a dialog box informing me that I am
"Signing data with your private exchange key!" and that "An application is
requesting access to a Protected item.", and finally a request for a
password.  This is all fine and desired behavior.

After a few minutes however, I am prompted by a second dialog box just like
above.  And then a few minutes later,  I am prompted again.   And then on and
on.  I am making multiple calls to the web service but the program is using
the same, initial web service proxy instance (which has the cert already
loaded) so I am not sure why I keep getting prompted.  Just to reiterate, the
first dialog box is desired, the others are not.  

If anyone has any suggestions on how to get rid of the extra prompts they
would be much appreciated.  I've been pouring over forum posts for any help
and it seems like a lot of people have the same question but no verified
solution.  I would rather not use the Win32 api but that is a last resort.  
My environment is as follows:

OS:  win2k
.Net:  1.1
Language:  C#
Web Server:  WebLogic

thanks,
Keith
"Peter Huang" [MSFT] - 16 Dec 2004 02:36 GMT
Hi

Since I am not farmilar Weblogic.
I think you may try to set the HttpWebRequest.PreAuthenticate Property to
true to if that works for you.

You may try to change the webservice proxy's source code with
PreAuthenticate =true.

Here is a link you may take a look which may give you some idea.
http://groups.google.co.jp/groups?hl=zh-CN&lr=&selm=InXJtoVWEHA.2920%40cpmsf
tngxa10.phx.gbl

http://groups.google.co.jp/groups?hl=zh-CN&lr=&selm=SnMpWnjWEHA.328%40cpmsft
ngxa10.phx.gbl

Best regards,

Perter Huang
Microsoft Online Partner Support

Signature

Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.

Keith - 16 Dec 2004 03:23 GMT
Hi,

I've already tried this.  It does not work.  Other solutions suggest using
calls to the Win32 Api but I would rather not if possible.

Thanks though.

> Hi
>
[quoted text clipped - 19 lines]
> Get Secure! - www.microsoft.com/security
> This posting is provided "AS IS" with no warranties, and confers no rights.
"Peter Huang" [MSFT] - 17 Dec 2004 07:27 GMT
Hi

So far I think you may try with IIS, I think the Weblogic has the different
behavior with IIS.
e.g.
I guess maybe the weblogic will close every SSL connection after the call
is return. If so, every time we create the SSL connection, we will need to
access to the client certificate which will invoke the dialog.

I am not farmilar with weblogic,  I am not sure if there is a Keep alive
similar feature in Weblogic, anyway you may have a try.

Best regards,

Perter Huang
Microsoft Online Partner Support

Signature

Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.