Re: Encrypt request and response with usernametoken

From: Julie Lerman (jlermanATNOSPAMPLEASEthedatafarm.com)
Date: 10/22/04 

Date: Fri, 22 Oct 2004 01:24:38 -0400

on second thought, I better test that on my other computer where I have a
localhost and can experiment more readily with configuring policies with the
settings tool. I was doing it where I had to manually write policies.

"Julie Lerman" <jlermanATNOSPAMPLEASEthedatafarm.com> wrote in message
news:ONBU3X$tEHA.3872@TK2MSFTNGP15.phx.gbl...
> But the response? Doesn't the hashed version of the password change on the
> way back? I have actually grabbed the incoming username token in the web
> service and used that as the token to to encrypt the response but it fails
> when the client tries to handle it. The response is encrypted, but the
> username token is not right. I didn't play with it too much more after
> reading this post from Hervey from a while back.
> http://www.dynamic-cast.com/mt-archives/000017.html That was from November
> and maybe something changed.
>
>
> "Softwaremaker" <msdn@removethis.softwaremaker.net> wrote in message
> news:eSSZUE9tEHA.2184@TK2MSFTNGP12.phx.gbl...
> > John,
> >
> > You do not need the SecureConversation example for your scenario. A
simple
> > UsernameToken encryption and signing will be fine. Look at the
> > UsernameSigning example.
> >
> > There are some snippets on my blog as well. There is some sort if
> > implementation here. I hope you find this useful.
> >
>
http://dotnetjunkies.com/WebLog/softwaremaker/archive/2004/10/20/29158.aspx
> >
> > --
> > Thank you.
> >
> > Regards,
> > Softwaremaker
> > http://www.softwaremaker.net/blog
> >
> > =========================================
> >
> > "john" <jepros@yahoo.com> wrote in message
> > news:4178054b$0$29499$636a15ce@news.free.fr...
> > > Hello,
> > >
> > > I want to encrypt all messages (requests & responses) between my
client
> > and
> > > my web service. The authentication is done using a database that
stores
> > the
> > > usernames and passwords.
> > > I have tried to customize the SecureConversation sample to use
> > UsernameToken
> > > instead of x509 certs but I'm completely lost...
> > > Where can I find a sample matching my requirements ??
> > >
> > > Thanks
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Encrypt request and response with usernametoken
    ... Doesn't the hashed version of the password change on the ... I have actually grabbed the incoming username token in the web ... service and used that as the token to to encrypt the response but it fails ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: WSE 3.0 + UserNameToken without X.509 Cert/Kerberos + Signing + Encryption How?
    ... message security and thefore it does not encrypt the message. ... You need to combine this assertion with a secure transport like SSL if you ... between client and server using a UserNameToken that passes the UserName ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: ps - complete username
    ... When I first saw the response to the original poster's question, ... realize that this list does not have "Friendly and Helpful Customer ... To answer your question about knowing the difference between a username ... I've been a Debian user for the past 4 ...
    (Debian-User)
  • Re: WSE 2.0 SP2: UsernameTokens must be encrypted to request SCT?
    ... William Stacey, MVP ... > The SecurityTokenServiceClient class will now automatically encrypt any ... > Username tokens included in a request. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Encrypt a UsernameToken Authenticated WSE Response
    ... username and passwort und the data is symmetric encrypted, ... >> Decrypt) a SOAP Message by Using a Username and Password". ... But when I start my Client Application and call my ... >>> so that is used to generate a key to encrypt with. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)