Enforce specific client certificate on WCF service

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

tkaszuba2@gmail.com - 14 Nov 2007 12:36 GMT

This is driving me nuts.

I would like to secure my WCF service using certificates but I would
like to define which certificates have access, preferably configurably
since each of my deployment environments have different certificates.

In WSE 2.0 this was done using the wssp:Integrity element in the
policy file.

Is this even possible with WCF?

Reply to this Message

Dominick Baier - 26 Nov 2007 10:15 GMT

Have a look here:

http://www.leastprivilege.com/CertificateBasedAuthenticationAndWCFMessageSecurit
y.aspx

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

> This is driving me nuts.
>
[quoted text clipped - 6 lines]
>
> Is this even possible with WCF?

Reply to this Message

tkaszuba2@gmail.com - 26 Nov 2007 15:08 GMT

Thanks Dominick, I was going to write you privately since I knew you
had an idea about the answer. It's just too bad that this
functionality is not implemented automatically, it doesn't look like a
lot of work though.

On 26 Lis, 11:15, Dominick Baier
<dbaier@pleasepleasenospam_leastprivilege.com> wrote:

> Have a look here:
>
[quoted text clipped - 15 lines]
>
> > Is this even possible with WCF?

Reply to this Message

Enforce specific client certificate on WCF service

Free Magazines