check certification path and CRL

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

mk - 31 Aug 2005 18:36 GMT

When SOAP message is digitally signed, does WSE automatically check the
certification path and if the certificate has not been revoked? Can this be
accomplished by simply what is in the certificate store, or does custom code
need to be written?

Reply to this Message

Pablo Cibraro - 01 Sep 2005 17:30 GMT

Hi,
WSE checks both things by default.

In order to enable certification path in your web service, you have to
specify the attributes "verifyTrust" and "allowTestRoot" in the WSE
configuration:

<security>
<x509 storeLocation="LocalMachine" verifyTrust="true"
allowTestRoot="true"/>
</security>

Regarding to certificate revocation, you must add the revocation list to the
certificate store. WSE verifies if a certificate was revoked using that
list.

Regards,
Pablo Cibraro
www.lagash.com

> When SOAP message is digitally signed, does WSE automatically check the
> certification path and if the certificate has not been revoked? Can this
> be
> accomplished by simply what is in the certificate store, or does custom
> code
> need to be written?

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...