RE: Problem Setting Up x.509 Certificates for WSE2.0

From: Mike Clark (michael.clark_at_nospam.ofm.wa.gov)
Date: 09/21/04 

Date: Tue, 21 Sep 2004 15:53:03 -0700

Well, I identified the problem, and it surprised me. I wasted a lot of time
and effort on this, and it turns out that the instructions and WSE2 itself
appears to be targetted at Windows XP --- following a hunch I found the
"Other People" store on the certificate import dialog on the WinXPPro machine
we keep around for testing. Consultation with a respondent on another
mailing list provided me with the confirmation that WSE2 is easiest to work
with on WinXP. Apparently you can work around the limitations in W2K. I
hope so.

Grumble, grumble.

"Mike Clark" wrote:

> I am having trouble following the instructions provided for the sample apps
> found in the ReadMe.txt file provided for WSE2.0. Under "Setting up certs"
> the instructions say to use the MMC and "open both the current user's
> certificate store and the local machine certificate store snap-ins. Using
> Right-Click -> All Tasks -> Import..., import each of the following
> certificates from the 'Certificates' folder (provided) into the appropriate
> stores."
>
> The problem I run into is that the instructions do not seem to match the
> realities on my W2K box. The directions say to import them as follows:
>
> MsdnWse2SecuritySamplesClient.cer (Client's public key) ->
> LocalMachine/Other People
> MsdnWse2SecuritySamplesServer.cer (Server's public key) ->
> CurrentUser/Other People
> MsdnWse2SecuritySamplesClient.pfx (Client's private key) ->
> CurrentUser/Personal
> MsdnWse2SecuritySamplesServer.pfx (Server's private key) ->
> LocalMachine/Personal
>
> While there is a Personal store for both CurrentUser and LocalMachine, there
> is no Other People store! I am at a loss of how to get past this --- there
> are a number of other stores, including "Trusted Root Certificates",
> "Enterprise Trust", "Trusted People" and so on, but no exact match to "Other
> People". Unfortunately, "Other People" is exactly what the WSE 2.0
> Certificate Tool is looking for and I am at an impasse!
>
> Any suggestions?

Relevant Pages

  • Re: How to cast using MSVC++ Intrinsics
    ... to load the SIMD register from the stack on a quadword floating point load. ... What would be nice is to have init to 0 or -1 instructions. ... Store, Load, Store, etc. ...
    (comp.lang.asm.x86)
  • Re: problem with cache flush routine for G5?
    ... it then has to make sure that the icache doesn't contain ... > The original code was written for ppc hardware that had the ability to ... > changed instructions from the L2 cache. ... Do I actually still need the store? ...
    (Linux-Kernel)
  • Re: SslStream behavior (slow handshake when used in windows services)
    ... I think the personal store is the wrong place. ... it seems that it fails to validate the cert chain ... So If I store the server side cert into the certificate store of the ...
    (microsoft.public.dotnet.security)
  • Problem Setting Up x.509 Certificates for WSE2.0
    ... I am having trouble following the instructions provided for the sample apps ... certificate store and the local machine certificate store snap-ins. ... MsdnWse2SecuritySamplesClient.cer (Client's public key) -> ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Intel x86 memory model question
    ... processor 3 loads from Y ... show that PC alone wasn't sufficient to guarantee that if processor 3 saw the store into Y by processor 2 that it would see the store into X by processor 1. ... have such dependencies than it is to change threading libraries in OS ... "I/O, locking, and/or serializing instructions" can synchronize is? ...
    (comp.arch)