 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
.NET Forum / ASP.NET / Web Services / September 2004WS-Security with makecert
I'm trying to pass an X509SecurityToken from my client to my web service. The certificate was made using makecert.exe, so it obviously isn't trusted by the system. The problem now is that my service rejects the call outright with the following message: Microsoft.Web.Services2.Security.SecurityFault: The security token could not be authenticated or authorized ---> System.Security.SecurityException: WSE537: The certificate's trust chain could not be verified with the following reason: A certificate chain processed correctly, but terminated in a root certificate which is not trusted by the trust provider. Can I tell my service not to implicitly verify the certificate? Or, is there a way to make the system trust my certificate? In your web.config file, you can check the entry for X.509 certificates. Two attributes relate to your question: verifyTrust and allowTestRoot. See the WSE 2.0 docs for more info. I am not sure if makecert certificates are the ones that will be allowed if allowTestRoot is true. In any case, verifyTrust="false" will not check the chain to find a trusted issuer. HTH,  SignatureSven > I'm trying to pass an X509SecurityToken from my client to my web > service. The certificate was made using makecert.exe, so it obviously [quoted text clipped - 10 lines] > Can I tell my service not to implicitly verify the certificate? Or, is > there a way to make the system trust my certificate? Try adding the certificates CA into your trusted root to see if it helps Regards Dilip Krishnan > I'm trying to pass an X509SecurityToken from my client to my web > service. The certificate was made using makecert.exe, so it obviously [quoted text clipped - 10 lines] > Can I tell my service not to implicitly verify the certificate? Or, is > there a way to make the system trust my certificate? Free MagazinesGet these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...
|
Reply to this Message
|
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2008 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.