Re: http request from windows service

From: Eliyahu Goldin (removemeegoldin_at_monarchmed.com)
Date: 12/16/04

  • Next message: Paul Bacelar: "Re: ActiveX component error"
    Date: Thu, 16 Dec 2004 17:41:25 +0200
    
    

    Right, when the service runs under the same account that the certificate was
    installed under, it works. Now I need to figure out how to grant access to
    the private key to another account. Downloaded a tool called
    winhttpcertcfg.exe and am playing with it.

    Thank you,

    Eliyahu

    "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
    in message news:OzaWEUv4EHA.2568@TK2MSFTNGP10.phx.gbl...
    > Ah, the client certificate is almost certainly the issue then. Make sure
    > the service account has access to the private key.
    >
    > Joe K.
    >
    > "Eliyahu Goldin" <removemeegoldin@monarchmed.com> wrote in message
    > news:uwqpuEv4EHA.3644@tk2msftngp13.phx.gbl...
    > > Thank you Joe,
    > >
    > > It is SSL and it uses client certificate. I will look at it.
    > >
    > > Eliyahu
    > >
    > > "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com>
    wrote
    > > in message news:eiMe00t4EHA.4092@TK2MSFTNGP14.phx.gbl...
    > >> It might be credentials-related, SSL related or proxy server related.
    > > Does
    > >> the server require authentication? If it is SSL, are you sure you have
    > > the
    > >> trusted roots installed where the service account can get to them? If
    it
    > >> goes through a proxy server, are you sure the service account has that
    > > proxy
    > >> configuration?
    > >>
    > >> I'd check those assumptions first. It is a generally good idea to put
    > > some
    > >> robust instrumentation in any kind of service process though unless you
    > > plan
    > >> to handle these issues by attaching a debugger to it in production.
    > >>
    > >> Joe K.
    > >>
    > >> "Eliyahu Goldin" <removemeegoldin@monarchmed.com> wrote in message
    > >> news:OCWmaJt4EHA.1300@TK2MSFTNGP14.phx.gbl...
    > >> > When started from command line, the application makes an http
    request,
    > >> > gets
    > >> > a response and writes it to a file. When started from a windows
    > >> > service,
    > >> > no
    > >> > file is created. I might have to add some tracing to the application
    > >> > and
    > >> > see
    > >> > if an exception is generated. In meantime I am just wondering if
    there
    > >> > are
    > >> > any known security issues.
    > >> >
    > >> > Thank you for answering,
    > >> >
    > >> > Eliyahu
    > >> >
    > >> > "Nicole Calinoiu" <calinoiu REMOVETHIS AT gmail DOT com> wrote in
    > > message
    > >> > news:eRwMyKs4EHA.2876@TK2MSFTNGP12.phx.gbl...
    > >> >> What do you mean by "[it] doesn't seem to work when I start it from
    a
    > >> >> windows service"? Are receiving a particular exception? If so,
    could
    > >> >> you
    > >> >> please provide the full exception details as retrieved from a call
    to
    > > its
    > >> >> ToString() method?
    > >> >>
    > >> >>
    > >> >> "Eliyahu Goldin" <removemeegoldin@monarchmed.com> wrote in message
    > >> >> news:uR1zGgr4EHA.1404@TK2MSFTNGP11.phx.gbl...
    > >> >> > What security issues shall I care about when sending http requests
    > > from
    > >> > a
    > >> >> > windows service? I have a console program that works fine if I
    start
    > > it
    > >> >> > from
    > >> >> > command line and doesn't seem to work when I start it from a
    windows
    > >> >> > service. I am using HttpWebRequest and HttpWebResponse classes.
    > >> >> >
    > >> >> > Eliyahu
    > >> >> >
    > >> >> >
    > >> >>
    > >> >>
    > >> >
    > >> >
    > >>
    > >>
    > >
    > >
    >
    >


  • Next message: Paul Bacelar: "Re: ActiveX component error"

    Relevant Pages

    • Re: IIS 6 Directory Services Mapping ACL Problems
      ... It would appear that you can not delegate Certificate based credentials. ... IIS does not have the user's password, so it can't just logon to the remote ... file server as the user directly. ... Lastly - if you want to see what account is being used to access the remote ...
      (microsoft.public.inetserver.iis.security)
    • Re: How do I deal with "Password Synchronization is not supported"
      ... It just means that you need to select a local account (an account local to ... You can not allocate an SSL Certificate to a single folder. ... and then click Default Web Site. ... In the Anonymous User Account dialog box, ...
      (microsoft.public.inetserver.iis.security)
    • Re: Protecting Directories
      ... If you do, then only your account, and an optionally ... If you select to use EFS, then you should be certain that you ... For this your machine needs a smart card ... an issueing authority for the certificate on the card. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: X509 digital certificate for offline solution
      ... > license blind signatures at that time (great that the patent expired now ... giving the person's current account balance (at the time the ...
      (microsoft.public.dotnet.security)
    • Re: EFS and transparent file sharing on XP pro
      ... As the account is an admin it has two ways available to ... EFS encrypted files of that account. ... then the next attempt to encrypt a file ... XP pro added a new> certificate for EFS for my userid. ...
      (microsoft.public.windows.server.security)