Security problem with orchestration exposed as web service

Hi everyone!

I need help with a security issue. I have an orchestration exposed as
a web service. Then I want to secure it using transport mode with
certificates. I have created one with "CN=localhost" in personal
store.

Then I wrote a client example to access my web service and I received
an error message "The caller was not authenticated by the service".

Here is my client code example :

EndpointAddress epAddress = new EndpointAddress("http://localhost/
EnvoiDCI/WcfService_EnvoiDCIOrchestrastion.svc");

WSHttpBinding binding = new WSHttpBinding(SecurityMode.Transport);
binding.Security.Transport.ClientCredentialType =
HttpClientCredentialType.Certificate;

WcfService_EnvoiDCIOrchestrastionClient client = new
WcfService_EnvoiDCIOrchestrastionClient(binding, epAddress);
client.ClientCredentials.ClientCertificate.SetCertificate(StoreLocation.LocalMachine,
StoreName.My, X509FindType.FindBySubjectName, "localhost");
client.ClientCredentials.ServiceCertificate.Authentication.CertificateValidationMode
= X509CertificateValidationMode.PeerOrChainTrust;

In my receive port in Biztalk Administration console, I set Security
Transport mode and Certificate.
Is IIS, I configured the web service to use the certificate.

What can be my problem ? Anyone could help me?

Thanks a lot

Benoit
.

Relevant Pages

  • RE: Recommendations for securing a local webservice.
    ... You seem to be trying to secure a web service interface to only those ... protocol that was intended to be caller agnostic to implement a caller ... Install a special certificate as part of the ... Combine #2 with token based security. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Public key certificate disappears automatically !!!
    ... My web service is a token issuer and issues Security ... server certificate and imported it into the Local Computer -> Personal store ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: XEnroll and local machines cert store
    ... I am trying to enroll a certificate this way (at the difference code is ... within a web service - never mind about security for the moment -). ...
    (microsoft.public.platformsdk.security)
  • Re: WSE 3.0, usernameOverTransportSecurity, custom Token Manager w/ securityTokenManager,
    ... I've added the web service call directly to my Data binding method ... expected but not present in the security header of the incoming ... the username token to the message. ... protected override string AuthenticateToken(UsernameToken token) ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Cannot read a Security Log from ASP.net web service
    ... it's a very bad idea to grant that permission to the ASPNET ... Here's the error I get after adding the ASPNET account to the Admin group: ... Cannot open log Security on machine .. ... > a web form that calls a web service. ...
    (microsoft.public.dotnet.framework.aspnet.security)
Quantcast