Re: WCF webservice over SSL and without

Thank you Steven. Yes I am going to use the IIS method and I do have it already setup for
that. I'm also familiar with how to setup a secure site in IIS. Additionally, I've also
configured the older ASMX webservices over https via IIS before.

However, with this WCF webservice, if I hit the .svc file via IE using the
https://server/service.svc link it spits back a http link reference to the WSDL.
Even if I rewrite the URL as https://server/services.svc?WSDL, it just sends me to the
initial page with the http wsdl link.

Surely that can't be right?

I'm assuming there's some point of endpoint configuration I need to do. That's the part I'm
missing/confused about.
-JK

"Steven Cheng [MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:2SOZQkhlIHA.1036@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Jonathan,

From your description, you're going to expose your WCF service via both SSL
and non-SSL channel, correct?

Are you going to use SSL over Http(the most common and convenient
approach)? For non-SSL, I think it is quite straightforward, and what you
need to do is adding a new service endponit that use https/ssl based
address. If hosting in IIS is possible, I recommend you host the https/ssl
one in IIS since that can make the SSL/HTTPS configuration much more
convenient. Here are some reference about configuring SSL/HTTPS in IIS:

#On IIS 6.0, how do I configure my website to use SSL?
http://www.petri.co.il/configure_ssl_on_your_website_with_iis.htm

#Configuring SSL on a Web Server or Web Site (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5
6bdf977-14f8-4867-9c51-34c346d48b04.mspx?mfr=true

Sure, https/ssl can be used out of IIS based on the new http.sys component
in windows and WCF can also uitlize it. However, it will require much more
configuration which is complex. Here are some reference mentioned about
configurating HTTPS in self-hosted context:

#Configuring HTTP and HTTPS
http://msdn2.microsoft.com/en-us/library/ms733768.aspx

#WCF example: Using of self-hosted service with SSL
http://developers.de/blogs/damir_dobric/archive/2006/08/01/897.aspx

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
Reply-To: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
From: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
Subject: WCF webservice over SSL and without
Date: Thu, 3 Apr 2008 23:12:13 -0400


Hi,

I'd like to my WCF webservice to work both on SSL and without.
Unfortunately searching has
led to dead ends, references to changes that only work on the old previous
beta versions and
I admit I am rather confused and frustrated.

That being said, I'd like some direction in how exactly I'm supposed to
accomplish this.

Thanks very much,
JK




.

Relevant Pages

  • Re: SSL broken after Windows 2003 upgrade
    ... The svchost.exe you reference is "IIS". ... routes them to the appropriate w3wp.exe based on configuration from WAS ... WFetch can make both a normal SSL request as well as a Client-Certificate ...
    (microsoft.public.inetserver.iis)
  • Re: WCF webservice over SSL and without
    ... I'm also familiar with how to setup a secure site in IIS. ... \par However, with this WCF webservice, if I hit the .svc file via IE using the ... \par I'm assuming there's some point of endpoint configuration I need to do. ... \par> Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: WCF webservice over SSL and without
    ... Microsoft MSDN Online Support Lead ... You can send feedback directly to my manager at: ... WCF webservice over SSL and without ... I'm also familiar with how to setup a secure site in IIS. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: WCF webservice over SSL and without
    ... Based on your further description, you have setup the SSL correctly in IIS server, but encountered some problem visit the WCF service's metadata page, correct? ... \par> Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: DCOM calls fails - access denied
    ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
    (microsoft.public.dotnet.framework.aspnet.security)