user name and pasword encryption WSE2.0

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

MSDN - 24 Feb 2006 02:17 GMT

Hello,

I am using WSE2.0 and windows authentication user token
I would like to encrypt the user name and password as in

Dim oToken as new
Microsoft.Web.Services2.Security.Tokens.UsernameToken("myusername","myPassword",
PasswordOption.SendPlainText)

I am NOT talking about the PasswordOption enum

I would like to send an encrypted "myusername" and "mypassword" and not have
them visible in code at all

Also How on the server side it is decrypted?

If I encrypt "myusername" how does the server side decrypt it and still work

if PasswordOption is Hashed it does not work for me with Windows
Authentication

Any help is appreciated.

SA

Reply to this Message

Pablo Cibraro - 24 Feb 2006 13:36 GMT

Hi,

You will have to use a X509 certificate to encrypt the message.
You can specify that certificate by means of code or a security policy. (It
will be easier if you use the Configuration tool provided by WSE)

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax

> Hello,
>
[quoted text clipped - 21 lines]
>
> SA

Reply to this Message

KevinR - 24 Feb 2006 17:18 GMT

I am also trying to get started with this stuff.
"You will have to use a X509 certificate to encrypt the message. "
Where would I get one of these? Do I make one up? I happen to have an
SSL cert from a different project - will that do? Pardon my ignorance;
the security stuff is a bit confusing at the outset.

Thanks,
kevin

Reply to this Message

Pablo Cibraro - 27 Feb 2006 14:10 GMT

Hi Kevin,

That depends on what your are looking for.
If you are insterested on some test certificates for your development
environment, a set of certificates created with the tool "Makecert" are just
fine.
Otherwise, you will have to consider buying some certificates from some
authority like VerySign.

Thanks
Pablo.

>I am also trying to get started with this stuff.
> "You will have to use a X509 certificate to encrypt the message. "
[quoted text clipped - 4 lines]
> Thanks,
> kevin

Reply to this Message

Rate this thread:

user name and pasword encryption WSE2.0

Free Magazines