Re: Questions about certificates

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Softwaremaker (msdn_at_removethis.softwaremaker.net)
Date: 10/15/04


Date: Sat, 16 Oct 2004 00:02:39 +0800


"Znmaster" <zengniu2001@hotmail.com> wrote in message
news:e4oPrmqsEHA.636@TK2MSFTNGP09.phx.gbl...
> Old problems are solved, and comes new ones. WSE2 provides three sample
> certificates made by MakeCert. I wanted to make similar certificates using
> MakeCert but failed.
> Would you be kind enough to tell me the commands to make certificates
> that support encryption and signing for client and Webservice to use to
> secure soap message?

Makecert.exe utility is a tool that comes with the .NET framework.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cptools/html/cpgrfcertificatecreationtoolmakecertexe.asp

> Where can I download free certificates?

Even if you can (and I am assuming you can't), it is really NOT recommended.

> If A and B want to communicate with each other through soap messages
> which are secured by encrypting and signing, is it necessary that both
sides
> should have two certificates,one including his own private key(
XX.pfx),the
> other including his public key(XX.cer)?

A encrypts a message for B using B's Public Key. So A needs B's Public Key
A signs a message for B using A's Private Key. So B needs A's Public Key.

> I hope detailed explanations.
> Help would be appreciated!
>
>

-- 
Thank you very much.
Warmest Regards,
Softwaremaker
==================================


Relevant Pages

  • RE: using certificates in Outlook for encryption
    ... using certificates in Outlook for encryption ... And finally is not necessary to send your public key to intended recipient. ...
    (Focus-Microsoft)
  • Re: Questions about certificates
    ... need to correct myself here wrt to the makecert utility below ... have run into several problems with the one in the Framework SDK. ... I wanted to make similar certificates ... > A encrypts a message for B using B's Public Key. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • RE: Re: using certificates in Outlook for encryption
    ... This is why publicly-used certificates & their associated key pairings ... and then sign it with a forged private key and include the ... If you send the public key in the same message, ... using certificates in Outlook for encryption ...
    (Focus-Microsoft)
  • RE: using certificates in Outlook for encryption
    ... with certificates from AD using GAL. ... system and Outlook and the private key associated with this. ... And finally is not necessary to send your public key to intended recipient. ... using certificates in Outlook for encryption ...
    (Focus-Microsoft)
  • Re: How to secure client/server messaging
    ... > - public encryption cannot be used for longer texts. ... You need to use not just keypairs, but X.509 certificates. ... contains signed public key. ... find out that it has not been modified and that the public key is really ...
    (microsoft.public.dotnet.security)