WCF / ASMX :: Receive Client Certificate In Web Service?
Oct 15, 2010
I'm trying to receive a Client Certificate in a Web Service and having some problems.
Client
[Code]....
The certificate seems to be correclty loading and added to the client.
The client connects to the server with HTTPS.
Server:
[Code]....
cert.IsPresent is false and all certificate fields are empty.
IIS is configured to Accept Client Certificates.
Reproduced in two environments:
- Windows 7 x64, IIS 7, VS 2008, .NET 3.5
- XP x86, IIS 5, VS 2008, .NET 3.5
Always in the Web Service the Client Certificate is not proesent. I haven't been able to find any other configuration I should do.
View 1 Replies
Similar Messages:
Aug 23, 2010
I am trying to create a web service that can do the following functionality:
Request XML
[Code]....
How can I create web service to do this.
View 1 Replies
Nov 17, 2010
Am facing problem while consuming a java web service using WCF. below is the web.config and aspx.cs file details
Requirement
Service request and response will be encrypted with certificate. when i run this below code am getting the error "The private key is not present in the X.509 certificate."
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="TestClientCertificate">
<clientCredentials>
<clientCertificate storeLocation="CurrentUser" storeName="My"
findValue="certificatename" x509FindType="FindByIssuerName"/>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="TestHttpBinding" maxReceivedMessageSize="1048576" maxBufferSize="1048576" transferMode="Buffered">
<security mode="TransportWithMessageCredential">
<!--<transport clientCredentialType="Certificate"/>-->
<message clientCredentialType="Certificate"/>
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint name="TestHttpPort" address="https://webserviceurl/webservice"
binding="basicHttpBinding" bindingConfiguration="TestHttpBinding"
behaviorConfiguration="TestClientCertificate"
contract="ServiceReference1.webService1">
</endpoint>
</client>
</system.serviceModel>
in page
protected void Page_Load(object sender, EventArgs e)
{
WebServiceClient abc = new WebServiceClient();
BindingElementCollection elements = abc.Endpoint.Binding.CreateBindingElements();
elements.Find<SecurityBindingElement>().IncludeTimestamp = true;
abc.Endpoint.Binding = new CustomBinding(elements);
WebServiceClientResponse xyz = abc.WebMethod("", "");
}
private static bool customXertificateValidation(object sender, X509Certificate cert, X509Chain chain, System.Net.Security.SslPolicyErrors error)
{
return true;
}
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="TestClientCertificate">
<clientCredentials>
<clientCertificate storeLocation="CurrentUser" storeName="My"
findValue="partnerservices" x509FindType="FindByIssuerName"/>
</clientCredentials>
<!--<serviceDebug includeExceptionDetailInFaults="true"/>-->
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="TestHttpBinding" maxReceivedMessageSize="1048576" maxBufferSize="1048576" transferMode="Buffered">
<security mode="TransportWithMessageCredential">
<!--<transport clientCredentialType="Certificate"/>-->
<message clientCredentialType="Certificate"/>
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint name="TestHttpPort" address="https://webservicespprd.biworldwide.com/partnerservices/services/v1/AccountWebService.biws"
binding="basicHttpBinding" bindingConfiguration="TestHttpBinding"
behaviorConfiguration="TestClientCertificate"
contract="ServiceReference1.AccountWebService">
<!--<identity>
<certificate encodedValue="MIIB5zCCAVCgAwIBAgIQlerVslZ+4p1Of3evhNc3TDANBgkqhkiG9w0BAQQFADAP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"/>
</identity>-->
</endpoint>
</client>
</system.serviceModel>
View 7 Replies
Jul 26, 2010
I need to send a X.509 client certificate to a web service in byte array (not attached to request). Besides the certificate, the caller will also send data and signed data. From the web service I can verify if the signature is ok but I don't know what is required to verify that the certificate is ok. I have the client certificate issuer CA trusted in Server (where the web service runs).
More specifically, how can I verify if a X.509 certificate itself is valid? I need to do it in web service not from IIS.
View 4 Replies
Aug 30, 2010
I have created a web service that authenticates with username and password, works fine.
Basically this one, http://msdn.microsoft.com/en-us/library/ff649647.aspx
Now I also want to connect to this web service using client certificates, works fine
http://msdn.microsoft.com/en-us/library/cc948997.aspx
But I would like to when authenticated via client certificates, connect that certificate to a user in the membership database. So that I can use Roles.IsUserInRole(...) and such.
I thought that, well if I implement a Custom certificate Validator http://msdn.microsoft.com/en-us/library/ms733806.aspx then I could check for example subject and map that against a created username in the membership database.
But in the class X509CertificateValidator public override void Validate(X509Certificate2 certificate) I don't have the same ability as when the user is authenticated
like
void OnAuthenticateRequest(object source, EventArgs eventArgs)
HttpApplication app = (HttpApplication)source;
Basically how can I do this
app.Context.User = new
GenericPrincipal(new
GenericIdentity(username,
"Membership Provider"),roles);
within
public override
void Validate(X509Certificate2 certificate)
and if that is not possible, can this be solved differently? Bottom line, how do I connect a client certificate to a user account in the membership database. Is there a MSDN article on how to do this?
View 1 Replies
Nov 8, 2010
A customer reported that our asmx web service is continually increasing in memory (mem usage as well as private bytes). We are able to reproduce the problem in our lab with Windows 2003 Server SP2 (fully patched) on some of the machines. The customer is using Windows 2008.
We created a Hello World web service targeting the 2.0 framework built under VS2005 SP1 and a test client that continues to call it. The memory increases steadily - approximately 40K per client request. If the test app is paused, the memory remains the same. When it is closed, the memory drops. Explicit calling of GC.Collect does not drop the memory.
We have run the memory profiler on the service and the leak is all native memory. We have uninstalled/re-installed the Framework on one of the machines but no difference. To our knowledge all of the security and IIS settings are not modified. We have compared app pool, default web site and virtual directory properties to machines that have no problem and they are identical.
View 11 Replies
Nov 30, 2012
Let's assume our users in their office using Internet explorer to sign some Web Pages using their client certificate imported into the Internet explorer browser (let s assume no other browser is used)
what is a good approach/architecture for validating the client certificate (Internet Explorer), how to send that certificate or the signed form to the server and how do we verify the signature
Should we use smart client approach integrated to the web application or some silverlight or so or is web form/web pages enough to implement this security requirement ?
View 1 Replies
Mar 8, 2011
when client call my web service, i read owner cookie?
For example : When Guest browse www.abc.com, i write a cookie that its name BrowseTime.
www.xyz.com using web service on www.abc.com . Can I get abc.com's BrowseTime cookie when xyz.com call WebService? Or alternative solution like (third part cookie or any)
View 3 Replies
Dec 15, 2010
I am having a strange issue in my C# Console Application:
Name Space: WcfConsoleApp
Main Class: Program.cs
Name Space: WcfConsoleApp.ServiceReference
this namespace contains the WCF service reference
After building the project, the Program.exe avaliable in Debug folder is executing fine as expected.But when i move the exe to Client, where i need to actually run this exe, it works fine up to the line where i am referencing the Service, the line is:
WcfConsoleApp.ServiceReference.ServiceClient service = new WcfConsoleApp.ServiceReference.ServiceClient();
the consoel app crashes on the client machine at this line. (i know this because before this line, i display some mesage on the console)the same .exe and works fine at my development machine.I am sure it has to do some thing with reference path, i think the program is not getting to the path where service reference is avaliable. I have copied the full project folder as it is to the client, but still its is not working.
View 4 Replies
Aug 30, 2010
I have consumed an external webservice in my client application using WCF. And every thing works great in my Dev box(XP with IIS5.1)But when the same application is moved to Prod server(Win Server 2003 with IIS6.0) it fails. Below is the exception caught:
There was no endpoint listening at http://MyExternalWebServiceUrlWithSessionId could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.And the InnerException is: Unable to connect to the remote server.My Config file has the below settings:
[Code]....
View 1 Replies
May 20, 2010
I am consuming the java web service in .net client, when i sent a request to that web service, i am getting one exception in response object.It says "Client found response content type of 'text/plain', but expected 'text/xml'", along with this message i am getting the response in that exception.
View 2 Replies
Apr 30, 2010
I receive the following error, when trying to consume Wcf service:
"An existing connection was forcibly closed by the remote host". Consuming the service works fine when the host and the client are on the same machine. When I move the client to Hyper-V virtual machine (I didn't try it on a real computer) - it throws the error. Both firewalls are turned off Do you know what can cause such behaviour? Here are the details:
Both the client (hyper-v) and the service are on Windows server 2008 R2
Service url - http://wcftest/CalculatorService.svc (wcftest is the website and is mapped in the hosts file to localhost)
Service config:
[Code]....
Client config:
[Code]....
Are there any configuration settings which I'm missing?
View 1 Replies
Sep 7, 2010
I am working on WCF Data service which imported stored procedure, as below.
[WebGet]
public List<GetMTSearchResultTest_Result> GettMTSearchResultTest()
{
MediaMarketResearch_PRODEntities ent = new MediaMarketResearch_PRODEntities();
return ent.GetMTSearchResultTest().ToList();
}
when i consuming this in my client application it says error as "The closed type MMRClient.MMRServiceReference.GetMTSearchResultTest_Result does not have a corresponding element settable property." I am getting this error while bind to the grid view as below.
DataServiceContext context = new DataServiceContext(new [URL])); IEnumerable<GetMTSearchResultTest_Result> empResult = context.Execute<GetMTSearchResultTest_Result>(new Uri [URL];
GridView1.DataSource = empResult;
GridView1.DataBind();
Note: I imported this stored proc as complex type.
View 1 Replies
Jan 5, 2011
I was wondering if anything special is required to add a .NET web services to the "Services" tab in NetBeans to allow my java app to consume a .NET web service. I go and add my WSDL (simple method, 1 operation, takes a string), and I continuously get a NullReferenceError as below:
java.lang.NullPointerException
at org.netbeans.modules.websvc.saas.model.wsdl.impl.WsdlModel.getServices(WsdlModel.java:65)
at org.netbeans.modules.websvc.saas.wsdl.websvcmgr.WebServiceManager.addWebService(WebServiceManager.java:142)
at org.netbeans.modules.websvc.saas.wsdl.websvcmgr.WsdlDataManagerImpl$1.run(WsdlDataManagerImpl.java:79)
at org.openide.util.RequestProcessor$Task.run(RequestProcessor.java:1418)
[catch] at org.openide.util.RequestProcessor$Processor.run(RequestProcessor.java:1957)
Is this something common? I'm using Netbeans 6.9.1 and yes, the webservice is a stub that takes a string and displays a static message right now.
View 1 Replies
Jan 26, 2011
I have a silverlight application that uses WCF service and i need to provide windows authentication using wcf.In order to achieve this i am trying to retrieve the client's credentials (windows credentials)inside wcf.
View 1 Replies
Feb 23, 2011
I need to store a pdf file on client machine using a web service.
I am unable to find IP address of client machine in web service so that I can insert pdf file in C-drive of client machine.
I am using asp.net 3.5 using c#.
View 2 Replies
Aug 2, 2010
I would like to pass xml document to a method in WCF service by client that server will get xmldocument,parse it and send back the xml response.What are best practice for thi?The xml document is conform to XSD so i would like to create managed type that represent the schema and then expose thatIf anybody has done it before or know any example please point it out so i can see it.
View 1 Replies
Mar 29, 2011
Most WCF web service I have developed were consumed in a server side code (by adding a service reference in visual studio or creating a proxy class using svcutil.exe. I have never consumed a web service in a client code. So I apologize if I am using wrong terminology or my question does not make sense.We have a browser add-on or plugin that connect to a device on client computer (think of it as active-x control for internet explorer) inside a asp.net web page.This browser plugin/add-on then will be sending measurement data to the web server. After some research it appears to me that I can do eithera) Develop an AJAX enabled WCF web service and use script manager and javascript to consume it inside the web page that interact with browser pluginb) Develop a WCF web servcice (not sure about AJAX enable) that serialize request and response to JSON, and use JQuery inside asp.net page to consume it.QuestionWhat's difference between approach a) and b)? Which is better in particular scenario I have described.
View 4 Replies
Apr 8, 2010
I have a (relatively) simple web service host. This ws exposes two methods: verify and processRequest.
Is there a way for the host to get information about where the request is coming from?
I am looking for things like IP Address, time/date sent, payload size (and maybe entire message size), etc...
I can not use custom SOAP headers, so I need to rely on whatever is in the default SOAP header.
I am writing my code in C#.
View 1 Replies
Mar 26, 2010
I have a simple WCF service that returns the time from the server. I've confirmed that data is being sent by checking with Fiddler. Here's the result object xml that my service sends according to fiddler.
[Code]....
Literally the only difference is the namespaces within the application. But still the values being returned are null, empty or a .NET default.
View 1 Replies
Feb 21, 2011
as part of a log feature that my client asked for, I'm tring to monitor whenever the browser is closed by the user.
I have created a new web service, registered it the ScriptManager (like in this exmple [URL]
The web method is this:
[Code]....
When I put a break point it is reached, but the executenonquery won't fired.
View 1 Replies
Sep 22, 2010
I want to create a WCF Service to transfer data to our clients application(WPF). The Data I am trying to send is as follows.
ID Code Description unit Rate
1 104200000 LIVE GOAT NOS 25
2 104200000 LIVE GOAT2 NOS 25
3 104200030 LIVE GOAT3 KGS 10
4 104202030 Water LTR 5
and so on till ~ 11000 records.
What I have done so far is. Created a service which return a list of data.
public List<Classes.TariffData> GetTariffData() { var currentTariffData = new List<Classes.TariffData>(); using (var myConnection = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString)) { const string query = "select a.ID,a.Code,a.Description,a.unit,a.rate,a.rate3 from tariff.dbo.tariffdata a, tariff.dbo.code_history b where a.id = b.id and b.endofvalidity is null"; using (var myCommand = new SqlCommand(query, myConnection)) { using (var ad = new SqlDataAdapter(myCommand)) { var dt = new DataTable("tariff"); ad.Fill(dt); currentTariffData.AddRange(from DataRow row in dt.Rows select new Classes.TariffData { Id = int.Parse(row["Id"].ToString()), Code = row["Code"].ToString(), Description = row["Description"].ToString(), Unit = row["unit"].ToString(), Rate = row["rate"].ToString(), Rate3 = row["rate3"].ToString() }); return currentTariffData; } } } }
Class is as follows
public class TariffData { public int Id { get; set; } public string Code { get; set; } public string Description { get; set; } public string Unit { get; set; } public string Rate { get; set; } public string Rate3 { get; set; } }
If i Limit the number of data by using const string query = "select top 300 a.ID,a.Code,a.Description. The Service works fine. But if I remove the top 300 part I get an error. What is your advice if I want a service to allow our client applications to update their data by using WCF. (11000 records.) I am using visual Studio 2010. C# .Net 4.0
View 3 Replies
Apr 28, 2010
when svc.getLookupList(reqobj) will call i get following error.
"There was no endpoint listening at http://rets.newjerseymls.com/rets that could accept the message. This is often caused by an incorrect address or SOAP action."
View 3 Replies
Sep 28, 2010
I want to Upload bulk images from client to server using web service...
I already create web service for uploading images but it does not support well.. i have used byte array for that..
View 2 Replies
Feb 25, 2011
I am not sure which approach I should use. I have a web application that needs to get/receive data from a third party application that is in a secure remote network. The data needs to be secure during transport. The data layers cannot be exposed and the databases will not talk to each other. The data will be received from remote application on demand, or will get at scheduled intervals.
I have looked at WCF, but not sure if this will work. Can a WCF service be used to receive data as needed from a remote sender or service? Is this a secure way of doing it? I have also looked at SFTP using some XML/XSLT, but I don't think this is the right way to go. In addition, some data may be transported from my web application to the remote application (mostly reports at first). What protocols are used to transfer data between HIPAA compliant applications?
View 7 Replies
