I want to be able to encrypt part of a soap message. I understand I need the
public key of the identity running the web service I am sending the message
to. My Questions are
a) Where do I get the name of the identity I am sending the message to?
This is implicit in nature, just like you know the endpoint of the
service you are hitting, you will know the identity of the service
aswell. By, refering to public key you are using PKI (X509 cerficates).
So the service should give the public cert that the clients need to be using
b) How do I distribute the web service identity's public keys (in a intranet
environment)? Do I use the LocalMachineEnterprise store? How?
Certificate distribution is always a problem. You can export
certificates on the server using the MMC plug-in for certificates. And
then give the .cer (containing the public key) files to all the clients.
Thanks
--
HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
http://www.geniant.com
.
Re: message encryption ... To answer your question, On why its implicit in nature, take the example of transport dependent message integrity here the certificate is assumed to be issued to the server of the same name as the hostname of the endpoint you're hitting. ... The clients are on the intranet. ... refering to public key you are using PKI (X509 ...certificates on the server using the MMC plug-in for certificates. ... (microsoft.public.dotnet.framework.webservices.enhancements)
Re: Encrypting the response ... Client picks up the imported server...public key to encrypt the request OK using my code. ... Settings 2.0>Security tab>Store location for the web service to LocalMachine. ... X.509 Certificates Accessible to WSE' implies that IIS 6 will use an account ... (microsoft.public.dotnet.framework.webservices.enhancements)
RE: Cannot decrypt files encrypted using Crypto API on a different ... We have a desktop application which is used by many clients.... send it over to the clients (we don't know anything about their public key).... from step 2, hExpKey is NULL, blob type is PUBLICKEYBLOB) and send this blob ...encrypt your data with this key ... (microsoft.public.platformsdk.security)
Is this Possible? ...clients including new applications that as of yet do not have any web ... One of our concerns using HTTPS to secure our transactions is ... gets the public key of the server's certificate to encrypt the data ... The server then uses its private key to decrypt ... (microsoft.public.dotnet.framework.webservices.enhancements)
Re: Distributed Public Key ... > enviroment will contain multiple subnets all with access to NIS.... > I would like to do is store the public key file for a machine in some ... > should be able to use NIS to distribute this data to the clients using ... How do you "install" your machines? ... (comp.security.ssh)