Re: Encryption Problem
- From: "John" <John@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 28 Apr 2005 18:36:03 -0700
Thanks Hernan,
When I tried encrypting a message using a Public Cert for which I could not
possibly access the private cert (another staff member in a far off location)
the encryption works as expected.
I guess there must be some issues with Microsofts Certificate Store or
myself not deleting keys correctly. Any ideas what I may be doing wrong? I
usually just go into Certificate Store through mmc and delete the private
certificates from there using right-click->delete.
Cheers
John
"Hernan de Lahitte" wrote:
> As you stated right, you need only the public key to encrypt the message and
> the private key associated to that public key to decrypt that message. I
> would suggest you to verify if you don't have a private key installed on
> your server testing machine. Try with some certificate that you never
> installed on that machine and send the encrypted message from another
> machine so you may be sure that on the server side you are not using the
> private key associated to the public key you are using to encrypt on the
> client side.
>
> --
> Hernan de Lahitte
> http://clariusconsulting.net/hdl
>
> "John Wieland" <John Wieland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:AAC82CE8-C477-4B1E-B902-3A985CE65798@xxxxxxxxxxxxxxxx
> > Hi,
> > I'm working on a small client/server application which communicates using
> > SOAP messages secured by the new WSE2.0 Encryption and Digital Signature.
> >
> > I've been finding that when I send a message encrypted with someones
> > public
> > key that the other end can then decrypt the message with only the public
> > key
> > certificate present in the certificate store. If the certificate with the
> > public key is not present in the certificate store then the message is
> > rejected. As soon as I install the certificate which only has the public
> > key
> > in it to the certificate store the message is decrypted and allowed
> > through
> > the SOAP filters.
> >
> > This is a pretty big problem as public certificates are intended to be
> > just
> > that, "Public", and be publicly available by some means. So what good is
> > encrypting a message if anyone with the public certificate is able to
> > decrypt
> > it? Is there a setting I am not aware of?
> >
> > Thanks
> > John Wieland jwieland@xxxxxxxxxxxxx
>
>
>
.
- References:
- Encryption Problem
- From: John Wieland
- Re: Encryption Problem
- From: Hernan de Lahitte
- Encryption Problem
- Prev by Date: RE: Drilldown Sample Issues
- Next by Date: RE: Using UsernameToken.AnyElements to add extra credentialinfo
- Previous by thread: Re: Encryption Problem
- Next by thread: Receiving progress event/callback while getting a response
- Index(es):
Relevant Pages
|
