Verisign certificate cannot be used with WSE3 configuration tool.

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Frank - 29 Aug 2006 18:17 GMT

Hi All,

I am trying to use an SSL certificate that I got from Verisign to sign
and encrypt message using wse 3. The Verisign certificate I have is a
class 3 Secure Server Ca. When I use the wse configuration tool to
setup my policy (UsernameOverCertificate) and choose this certificate I
get the following error:

Selected certificate does not support data encryption.

I called Verisign and they are absolutely clueless on anything besides
installing certificates. Can anyone help with this?

Also, I was reading in the WSE 3.0 documentation and I was wondering if
it is possible to use usernameOverCertificate over HTTPS(SSL)?

Thanks for any help.

Reply to this Message

Pablo Cibraro [MVP] - 05 Sep 2006 15:46 GMT

Hi Frank,

Yes, WSE - UsernameOverCertificate assertion requires a certificate with
data encryption and data signing support. That is strange, the SSL
certificate that VeriSign gave you was created without data encryption
support (They should specify the purpose of the certificate at the moment of
creating it).

In order to use Username tokens over HTTPS, you have to use the
UsernameOverTransport assertion.

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax

> Hi All,
>
[quoted text clipped - 13 lines]
>
> Thanks for any help.

Reply to this Message

Verisign certificate cannot be used with WSE3 configuration tool.

Free Magazines