Client Certificates and Web Services

From: Write2Me (wrtie_at_toMe.org)
Date: 06/23/05

  • Next message: Matt: "Re: Forms Security"
    Date: Thu, 23 Jun 2005 11:41:20 -0400
    
    

    The problem I am experiencing is getting the .Net framework to recognize
    client certificates while executing code on the client.

    I have an ASP.NET web service application written that requires a client
    certificate when making a web method request. This web service works
    fine when called from a web browser, taking advantage of the simple test
    pages the ASP.Net framework provides.

    I wrote a client side, web service test harness as a .Net Console
    application. I’ve been racking my brain trying to get this to work.
    Specifically, the error is a 403 HTTP status back from the server.

    The only comments I could find searching the web and Usenet regarding
    this problem I am experiencing are contained here:
    http://tinyurl.com/7k2l2

    This web log really does not provide a solution and the writing is a bit
    unclear, at least to me. Whether I pass in a .cer file or a .pfx file
    to X509Certificate.CreateFromSignedFile(), a 403 error results.
    Stepping through my code, after creating an instance of the .Net
    X509Certificate object, its properties are null.

    The pfx file contains the private key of course, but it is *always*
    password protected, even when strong protection is not implemented.
    Perhaps I’m missing something. Any help give is appreciated. Thanks!


  • Next message: Matt: "Re: Forms Security"

    Relevant Pages

    • client certicate data on web service
      ... i have client certificates and i would like to know if there is ... any chance that my web service knows who is connected only by the client ...
      (microsoft.public.inetserver.iis.security)
    • Re: Implementing a common SOAP Header across multiple Web Service Pages
      ... to set a client up to reference multiple Web ... the Web Service site would ... Your point about leaving the ASMX page as lean as possible and acting just ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Implementing a common SOAP Header across multiple Web Service Pages
      ... between my Web Service application and the client. ... public string SID; ... Web Service page, rather than to a dozen or so separate Web Service pages ... You can easily create a .ASMX file ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Still Need desperate help to start with ASP NET - simplified problems - HELP!!
      ... You could do it as a web service. ... The handler can draw on the webservice for information and db lookup. ... IE posts data AJAX to handler on web server ... featured application (say thick client) which does a lot of complicate ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: WSE 3.0, SoapReceiver and Kerberos encryption
      ... I have a machine we'll call 'Service' which exposes a web service called ... I have defined a WSE 3.0 policy that sets up Kerberos Security. ... I have a machine we'll call 'Client'. ... format when the "target Web service is created using a SoapReceiver ...
      (microsoft.public.dotnet.framework.webservices.enhancements)