ssl - Transport Security with WCF, IIS, along with client authentication.. is it possible or not? -


i can find out few similar questions on regarding this, quite unsure answer this. more , more confused read through different posts on this. asking satisfaction.

i have wcf service hosted on iis. , have client connects service , invokes method. try use certificates make use of transport security.

on client side have config 

<bindings>   <basichttpbinding>     <binding name="testbinding">       <security mode="transport">         <transport clientcredentialtype="certificate"  proxycredentialtype="basic"/>       </security>     </binding>   </basichttpbinding> </bindings>  <behaviors>   <endpointbehaviors>     <behavior name="testbehavior">       <clientcredentials>         <clientcertificate storelocation="localmachine" storename="my" x509findtype="findbysubjectname" findvalue="client007"/>       </clientcredentials>     </behavior>   </endpointbehaviors> </behaviors>

on server side have configuration 

<behaviors>   <servicebehaviors>     <behavior name="testservicebehavior">       <servicemetadata httpsgetenabled="true"/>       <servicedebug includeexceptiondetailinfaults="true"/>       <servicecredentials>         <clientcertificate>           <authentication certificatevalidationmode="peertrust" trustedstorelocation="localmachine"/>         </clientcertificate>       </servicecredentials>     </behavior>   </servicebehaviors> </behaviors>  <bindings>   <basichttpbinding>     <binding name="testservicebinding">       <security mode="transport">         <transport clientcredentialtype="certificate"/>       </security>     </binding>   </basichttpbinding> </bindings>

now, scenario want is, client has public key installed on trusted people of server can access service.

but in case, whether install public key in trusted people or not. can access service certificate self create.

i checked anonymous authentication enabled, because of this? when disable anonymous access error saying

the http request unauthorized client authentication authentication received server basic realm

how make sure client public key on server can access service?

does kind of validation not work transport security? please me. thanks


Comments

Post a Comment

Popular posts from this blog

Why does Ruby on Rails generate add a blank line to the end of a file? -

running rails generate controller foo home results in: class foocontroller < application controller def home end end (there's nothing on line in actual file, blank line) is there purpose blank line? it's common use newline indicate end of line, last line. many editors (like vi, use) add in newline silently. consensus text files (especially in unix world) should end in newline, , there have been problems historically if wasn't present. why should text files end newline? the tool used count lines in file "wc" counts newlines in file, without trailing newline show 3 instead of 4. it improves readability of templates used in generator. consider: https://github.com/rails/rails/blob/master/railties/lib/rails/generators/rails/controller/templates/controller.rb to remove trailing newline, template have last line of: end<% end -%> instead of: end <% end -%> that seems less readable me. the discussion below refers ...
Read more

keyboard - Smiles and long press feature in Android -

i've created android keyboard. how add features inserting smilies, , using long keypresses display symbols? to create long-press behavior allows select several options pop-up menu, follow guide (specifically pop-up menu section): http://developer.android.com/guide/topics/ui/menus.html smileys (also known emoticons) combination of keys, understood programs , parsed same way. have do, when clicks smiley face on keyboard, simulate pressing of key combination matching emoticon. example, when clicks smiley, should simulate key presses ':' , ')' :). here's list of emoticons: http://en.wikipedia.org/wiki/list_of_emoticons
Read more

node.js - Bad Request - node js ajax post -

i'm using express 3.0 , node v0.11.0. have button submits form , i'm using ajax post data json object node server. client code is: $('#contact').submit(function(e) { console.log('submit called'); var formdata = json.stringify($('form').serializeobject()); console.log(formdata); $.ajax({ url: "http://localhost:3000/savedata/", type: "post", datatype: 'json', data: {objectdata: formdata}, contenttype: "application/json", complete: function() { console.log('process complete'); }, success: function(data) { console.log('process sucess'); }, error: function() { console.log('process error'); }, }); return false; }); then on server: var express = require('express'); var app = express(); app.set('views', __dirname + '/views'); app.set('view engine', 'jade'); app.use(express.bodyparser());...
Read more