security - WCF service certificate is not in the trusted people store -


i created wcf service should work using certificates. test i’m using self signed certificates works perfect, changes when i’m trying run on server, certificates generates ca. generated client , server certificates using ca, , after exported server certificate “trusted people” folder. (both certificates placed localmachine directory). have granted necessary permissions certificate.

the problem appears when i’m running client program i'm getting exception:

the x.509 certificate cn=xxxx not in trusted people store.

here server config

  <services>     <service behaviorconfiguration="myservicebehavior" name="poswsservice">      <endpoint address="http://xxxx/poswsservice.svc" binding="wshttpbinding" bindingconfiguration="myservicebinding"       contract="iposwsservice" />      <endpoint address="http://xxxx/mex" binding="mexhttpbinding" name="metadatabinding"       contract="imetadataexchange" />     </service>    </services>      <behaviors>         <servicebehaviors>            <behavior name="myservicebehavior">               <servicecredentials>                  <clientcertificate>                     <authentication certificatevalidationmode="peerorchaintrust" revocationmode="online"/>                  </clientcertificate>                  <servicecertificate findvalue="xxxxxxxxxxxxxxxxxxxxx" storelocation="localmachine"                     storename="my" x509findtype="findbyserialnumber" />               </servicecredentials>               <servicemetadata httpgetenabled="true" />               <servicedebug includeexceptiondetailinfaults="true" />            </behavior>         </servicebehaviors>      </behaviors>     <bindings>       <wshttpbinding>         <binding name="myservicebinding">             <security>                 <message clientcredentialtype="certificate"/>             </security>         </binding>       </wshttpbinding>     </bindings>   </system.servicemodel>

here client config

<system.servicemodel>     <bindings>         <wshttpbinding>             <binding name="wshttpbinding_iposwsservice"                  bypassproxyonlocal="false" transactionflow="false" >                 <security mode="message">                     <transport clientcredentialtype="windows" proxycredentialtype="none"                         realm="" />                     <message clientcredentialtype="certificate" negotiateservicecredential="true"                         algorithmsuite="default" />                 </security>             </binding>         </wshttpbinding>     </bindings>     <client>         <endpoint address="http://xxxx/poswsservice.svc"             binding="wshttpbinding" bindingconfiguration="wshttpbinding_iposwsservice"             contract="testservice.iposwsservice" name="wshttpbinding_iposwsservice" behaviorconfiguration="custombehavior">             <identity>                 <certificate encodedvalue="long word" />             </identity>         </endpoint>     </client>    <behaviors>     <endpointbehaviors>       <behavior name="custombehavior">         <clientcredentials>           <clientcertificate findvalue="xxxxxxxxxxxxxxxxxxx" x509findtype="findbyserialnumber" storelocation="currentuser" storename="my"/>           <servicecertificate>             <authentication certificatevalidationmode="peertrust"/>           </servicecertificate>         </clientcredentials>       </behavior>     </endpointbehaviors>   </behaviors> </system.servicemodel>

did know can mistake ?

i don't have lot of wcf experience, generally, want place ca cert in trusted location. client should have own trusted location , ca cert need go there too. , if production service, you'll want change certificatevalidationmode "chaintrust" both client , server, means trust certificates chain ca cert. "peertrust" means place actual cert want trust in trust locations. page may helpful at.


Comments

Post a Comment

Popular posts from this blog

Change php variable from jquery value using ajax (same page) -

what i'm trying this: i've php global variable $currentid , simple jquery script check if there "id" (page) in hash of url , if yes wanted give value $currentid . i've been reading lot , notice shall use ajax i'm not managing it. my code is: <script type="text/javascript"> $(document).ready(function(){ if (parent.location.hash != '' ) { var thecurrentid = parent.location.hash.split('#')[1]; $.ajax({ url: 'my.php', //current page type: 'post', data: {theid: thecurrentid }, datatype: 'json', success: function () { } }); } // code here }); </script> could me please? thank in advance. php server side language, meaning once has sent data browser, php variables , data cannot changed... however, using ajax, can send request php page , change data in dom based on result. consider th...
Read more

How can I fetch data from a web server in an android application? -

i want retrieve data web server in android application, , don't know begin. should use web services? i recommend these tutorials: connect android php , mysql , json in android , php , mysqli i used these tutorials , managed trying working without difficulty. between them describe each step in how attempting @ each stage, android application, database , web server side , has information included can process , use received information the thing add connect android php , mysql tutorial makes use of mysql_ in php deprecated. better use mysqli why included third link. the basic outline of want this: 1) in android app make request server php script using class this: import java.io.bufferedreader; import java.io.ioexception; import java.io.inputstream; import java.io.inputstreamreader; import java.io.unsupportedencodingexception; import java.util.list; import org.apache.http.httpentity; import org.apache.http.httpresponse; import org.apache.http.namevaluepair...
Read more

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more