Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / December 2004

Tip: Looking for answers? Try searching our database.

WSE - MakeCert

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Kyle Swanton - 21 Dec 2004 02:42 GMT
Hello all,

I've been having quite a number of issues trying to generate my own
certificates.  I'm using Makecert v5.131.3617.0 to generate the
certificate.  

Can someone give me a pointer to how I would create a certificate to
use to encrypt a Web Service conversation.  (It works using the sample
certificates that ship with the WSE 2.0 samples... I just want to
generate my own.)

Any help would be welcome,

Thanks,
Kyle
K. Mallory - 21 Dec 2004 16:31 GMT
Sure, go to the command prompt and set the directory to whatever directory
the makecert.exe excecutable is in. The type "makecert.exe" with the
appropriate switches. make sure that you leave a space after each switch like
"-ss loser" and type the resulting cert file at the end with a space between
it and the value of the last switch. If you want the cert to be installed
automatically to the "current user" / "other people" tree, omit the "-sr"
switch. Since you want to use it to encrypt messages I recommend installing
it to the LocalMachine root. S to do that, enter in the makecert.exe with "ss
root" and "-sr LocalMachine" when the cert is finished, close the command
window, double click on the cert file and press the install certificate
button. it should install it to the LocalMachine/Root catagory, if not,
manually select which store to use and put it in the LocalMachine/ "Root
trusted certificates" catagory. There you go! That should do it.

-Kristen

> Hello all,
>
> I've been having quite a number of issues trying to generate my own
> certificates.  I'm using Makecert v5.131.3617.0 to generate the
> certificate.
Kyle Swanton - 23 Dec 2004 19:38 GMT
Actually, I did not so much need a lesson on using command line
parameters as I needed to know what parameters to use specifically to
generate a certificate that would work with a WSE 2.0 enabled Web
Service.  Not sure what you were trying to say with the '-ss loser'
comment below, but I don't really think it was called for, and I found
it quite immature.

After doing some more research I used the following command to
generate a certificate that works for a Encrypted/signed Web Service
conversation:

makecert -r -pe -n "CN=ARRegSvc" -b 01/01/2000 -e 01/01/2036 -eku
1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft
RSA SChannel Cryptographic Provider" -sy 12

Thanks,
Kyle

>Sure, go to the command prompt and set the directory to whatever directory
>the makecert.exe excecutable is in. The type "makecert.exe" with the
[quoted text clipped - 17 lines]
>> certificates.  I'm using Makecert v5.131.3617.0 to generate the
>> certificate.
K. Mallory - 23 Dec 2004 19:45 GMT
Sorry, I was just using that as an example, wasn't trying to offend. I
couldn't tell exactly what part of the makecert you having trouble with. But
I'm glad you got it working... Any name space you use with the makecert will
work as long as it is part of the Trusted Root, and your web service
extensions are pointing to the same certificate store as the certificate is
on.

-Kristen

> Actually, I did not so much need a lesson on using command line
> parameters as I needed to know what parameters to use specifically to
[quoted text clipped - 35 lines]
> >> certificates.  I'm using Makecert v5.131.3617.0 to generate the
> >> certificate.

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.