how can we restrict what certificate WSE will use?

assume I'm hosting a webservice, I have 2 trusted clients consume my
webservice, each client will send in properly encrypted and signed request,
WSE will take care of decryption and verification of the signature,
everything works great. now there is a hacker, tries to consume my
webservice, he encrypted his request using my public key, and signed his
request using his own private key, when I received the request WSE will
automatically decrypt it and verify the signature successfully before
reaching my code where I verify it's a trusted client. as you can see, the
decryption and signature verify happens automatically before I can check if
it's a trusted client.

my question is, is there a way I can short circuit this process so that I
can terminate the request before decryption/ signature verification happens?

thanks,
-Jason


.

Relevant Pages

  • Re: how can we restrict what certificate WSE will use?
    ... the valid x509 certificate which is used to identify him'. ... X509SecurityTokenManager to verify the request is from a trusted client. ... the problem is that he can not passed the authentication (suppose we ... > decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: how can we restrict what certificate WSE will use?
    ... \par Microsoft Online Support ... \par you mentioned 'since his private key is not valid so, the signature of his ... \par in a request signed with his valid private key, and since his public key is ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: how can we restrict what certificate WSE will use?
    ... \par X509SecurityTokenManager to verify the request is from a trusted client. ... \par Subject: Re: how can we restrict what certificate WSE will use? ... \par there seems to be some disconnections where you say 'the hacker dosn't have ... \par> decrypte and signature validation process. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Application quit when i set ProgressBar.Minimum and ProgressBar.Maximum with the same value
    ... There could be a problem if the pseudocode below is invoked on a secondary ... "Request" means a package of data need to ... > by webservice then insert into SQL CE ... In my case, my SQL ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: upload 50M file to web service got 500 internal server error
    ... Try looking at the response in the trace. ... if the trace never shows a request, ... Right now maxRequestLength property of Web App and Webservcie are all set to ... But in trace.axd of the Webservice, ...
    (microsoft.public.dotnet.framework.webservices)
Loading