X509 Certificate Help

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

syed javid - 31 Aug 2005 11:09 GMT

Hi,

I have little confusion about using X509 Certificates. I work with Signing
of SOAP Message with Private Key (.PFX) having stored at Root Store in
Current user at Client Side and Public Key (.CER) at Local Machine Root
Store at Server Side it works. But I have problem when doing both Signing and
Encryption of SOAP Message using same Key's and at same location.
Error is Private Key not available.

Please any help about using of the Private Key and Public Key and locations
for signing and encryption both.
Is it Possible to use Private Key for both Signing and Encryption or I have
to use differnet key's for doing both Signing and Encryption.

Thanks in Advance

Reply to this Message

Marvin Smit - 31 Aug 2005 11:27 GMT

Hi,

Which account is requesting the cert? And is the cert in the Computer
or Personal store?

Hope this helps,

Marvin Smit.

>Hi,
>
[quoted text clipped - 11 lines]
>
>Thanks in Advance

Reply to this Message

syed javid - 31 Aug 2005 14:10 GMT

The Cert is in Personal Store and the Web Service is running under Domain
Administrator account also the cert accessable to ASPNET Account and Domain
Admin.
Still the same exception.

> Hi,
>
[quoted text clipped - 20 lines]
> >
> >Thanks in Advance

Reply to this Message

Pablo Cibraro - 31 Aug 2005 18:30 GMT

Hi,
You also need to install the private key on the server (Server.PFX instead
of Server.CER) because you need it to do encryption operations.
WSE uses X509 keys in the following way:

Signature -> Client uses private key to sign the message - Server uses
public key to verify the signature
Encryption -> Client uses public key to encrypt the message -> Server uses
the private key to decrypt the message

I hope this can help you
Regards,
Pablo Cibraro
www.lagash.com

> The Cert is in Personal Store and the Web Service is running under Domain
> Administrator account also the cert accessable to ASPNET Account and
[quoted text clipped - 30 lines]
>> >
>> >Thanks in Advance

Reply to this Message

syed javid - 01 Sep 2005 13:08 GMT

Thanks for reply,
I just want to clear it again you mean if i have client.PFX and Server.CER.
I have to install client.pfx at both client and server side and
server.cer should be install at Server side only.
If this is not right,please explain me uing this two files Client.PFX and
Server.CER How should i install at Client and Server sides.

> Hi,
> You also need to install the private key on the server (Server.PFX instead
[quoted text clipped - 45 lines]
> >> >
> >> >Thanks in Advance

Reply to this Message

Antonio Dias - 26 Oct 2005 11:45 GMT

> Thanks for reply,
> I just want to clear it again you mean if i have client.PFX and Server.CER.
[quoted text clipped - 52 lines]
>>>>>
>>>>> Thanks in Advance

in the client you need the client.pfx (private and public key) and the
server.cer (public key only)

In the server you need the client public key (that you can get from the
client.pfx) and the server private key

Reply to this Message

X509 Certificate Help

Free Magazines