Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / December 2004

Tip: Looking for answers? Try searching our database.

Problem with Policy Sample

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Tareq Muhammad - 08 Dec 2004 08:59 GMT
Hands-On Lab
Lab Manual
HOLDEVL34: WSE 2.0 Security and Policy
Hi all
I trid to run the sample [PolicyInvoiceAfter]
I installed the sample certificates, but I got the following error

---------------------------
Invoice Error
---------------------------
Microsoft.Web.Services2.Policy.PolicyVerificationException: WSE402: The
message does not conform to the policy it was mapped to.
  at
Microsoft.Web.Services2.Policy.SimplePolicyVerifier.VerifyMessageWithExpression(PolicyExpression
expression, SoapEnvelope message, EndpointReference endpoint, String action,
Uri requestEndpoint)
  at
Microsoft.Web.Services2.Policy.SimplePolicyVerifier.Verify(SoapEnvelope
message)
  at Microsoft.Web.Services2.Policy.PolicyManager.Verify(SoapEnvelope
message)
  at
Microsoft.Web.Services2.Policy.PolicyVerificationInputFilter.ProcessMessage(SoapEnvelope envelope)
  at Microsoft.Web.Services2.Pipeline.ProcessInputMessage(SoapEnvelope
envelope)
  at
Microsoft.Web.Services2.WebServicesExtension.BeforeDeserializeServer(SoapServerMessage message)
---------------------------
OK  
---------------------------

I have installed the certificates exactly as described in the manual

any help?
Martin Kulov - 08 Dec 2004 17:46 GMT
Hi Tareq,

In the WSE Settings Tool make sure that you check 'Allow test roots' in the Security tab for both sender and receiver.

Regards,

Martin Kulov
http://www.codeattest.com

MCAD Charter Member
MCSD.NET Early Achiever
Tareq Muhammad - 09 Dec 2004 05:25 GMT
I have already done,
BTW, that doest it means ?

> Hi Tareq,
>
[quoted text clipped - 7 lines]
> MCAD Charter Member
> MCSD.NET Early Achiever
Martin Kulov - 09 Dec 2004 08:14 GMT
Hi Tareq,

The sample certificates that you use are not issued from trusted authority like Verisign or other. I.e. they are test ones.
How did you create your policy? Did you use the policy wizard? Which options did you choose?

Regards,

Martin Kulov
http://www.codeattest.com

MCAD Charter Member
MCSD.NET Early Achiever
Tareq Muhammad - 09 Dec 2004 08:39 GMT
> Hi Tareq,
>
> The sample certificates that you use are not issued from trusted authority like Verisign or other. I.e. they are test ones.
> How did you create your policy?

>Did you use the policy wizard?
using wizard

Which options did you choose?
I use the option which stated in the Lab

Tech.ED 2004

Hands-On Lab
Lab Manual
HOLDEVL34: WSE 2.0 Security and Policy

-----------------------------------------------------
Task 1 – Installing the Sample Certificates
WSE 2.0 provides two sample certificates for you to use while testing your
WSE 2.0 applications. These two certificates were generated by the makecert
tool provided in the Microsoft Platform Software Development Kit. In order to
begin using these certificates in your applications, you must first install
them on your computer.

Note: you should not use these sample certificates in a production
environment. You must contact a certificate authority, request your own
certificate, and follow the procedures shown here to use it.

•    Open an MMC console by pressing Start, press Run, type mmc, and then click
OK.
•    On the File menu, click Add/Remove Snap-in
•    Click Add, under Snap-in, double-click Certificates.
•    Click My user account to add the certificates for the current user. Click
Finish.
•    Click Add, under Snap-in, double-click Certificates.
•    Click Computer account for the local machines certificates. Click Finish.
•    Close the dialog boxes.
•    Your MMC window should now look something like this:

•    In the console tree, under Certificates - Current User\Personal, click
Certificates.
•    Open the Certificate Import wizard by selecting Action | All Tasks and
choose Import.
•    Follow the wizard. When asked for the file to import, specify: C:\Program
Files\Microsoft WSE\v2.0\Samples\Sample Test Certificates\Client Private.pfx.
When asked for the private key password, specify: wse2qs. Finish the wizard.

Note: this certificate will be used by our client application to sign
messages sent to the service. It could also be used to identify the client
for authentication purposes.

•    In the console tree, under Certificates (Local Computer)\Personal, click
Certificates.
•    Open the Certificate Import wizard by selecting Action | All Tasks and
choose Import.
•    Follow the wizard. When asked for the file to import, specify: C:\Program
Files\Microsoft WSE\v2.0\Samples\Sample Test Certificates\Server Private.pfx.
When asked for the private key password, specify: wse2qs. Finish the wizard.

Note: this certificate will be used to encrypt messages between the
applications. The client application will use the public key to encrypt the
message and the service will use the private key to decrypt the message. The
client needs to have the public portion of the certificate available in the
Current User store.
•    In the console tree, under Certificates - Current User\Other People, click
Certificates.

Note: if you don't have an Other People store under Current User, open
Internet Explorer, select Tools, Internet Options, Content, and press the
Certificates button. You should see an Other People tab in the certificates
dialog. You can import the certificate here through this interface or you can
return to mmc and refresh the Current User tree and Other People should now
show up.

•    Open the Certificate Import wizard by selecting Action | All Tasks and
choose Import.
•    Follow the wizard. When asked for the file to import, specify: C:\Program
Files\Microsoft WSE\v2.0\Samples\Sample Test Certificates\Server Public.cer.
Finish the wizard.

Note: this certificate only contains the public portion of Server
Private.pfx. The client will use this to encrypt messages and the server will
use the private key installed in the Local Machine store to decrypt the
messages.

----------------------------------------------------

> Regards,
>
[quoted text clipped - 3 lines]
> MCAD Charter Member
> MCSD.NET Early Achiever

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.