Re: WCF webservice over SSL and without
- From: "Tiago Halm" <thalm@xxxxxxxxxxxxxxxxxx>
- Date: Sat, 5 Apr 2008 01:25:14 +0100
Jonathan,
It depends on the binding you're using - basicHttpBinding or wsHttpBinding -
and on the security mode you're using - Message or Transport.
If basicHttpBinding or wsHttpBinding and security mode as transport, then
its quite similar to an ASMX WebService. If wsHttpBinding, then all the
encryption/signature is handled by SOAP instead of HTTP (IIS) and should be
configured in the configuration file.
Anyway, have a look at the common securtity scenarios and see where your
fits:
http://msdn2.microsoft.com/en-us/library/ms730301.aspx
Afterwards, and if you still have difficulty setting it up, let us know and
we'll give you a hand.
Tiago Halm
"Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx> wrote in message
news:exN2pUnlIHA.4076@xxxxxxxxxxxxxxxxxxxxxxx
Thank you Steven. Yes I am going to use the IIS method and I do have it
already setup for that. I'm also familiar with how to setup a secure site
in IIS. Additionally, I've also configured the older ASMX webservices
over https via IIS before.
However, with this WCF webservice, if I hit the .svc file via IE using the
https://server/service.svc link it spits back a http link reference to the
WSDL.
Even if I rewrite the URL as https://server/services.svc?WSDL, it just
sends me to the initial page with the http wsdl link.
Surely that can't be right?
I'm assuming there's some point of endpoint configuration I need to do.
That's the part I'm missing/confused about.
-JK
"Steven Cheng [MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:2SOZQkhlIHA.1036@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Jonathan,
From your description, you're going to expose your WCF service via both
SSL
and non-SSL channel, correct?
Are you going to use SSL over Http(the most common and convenient
approach)? For non-SSL, I think it is quite straightforward, and what you
need to do is adding a new service endponit that use https/ssl based
address. If hosting in IIS is possible, I recommend you host the
https/ssl
one in IIS since that can make the SSL/HTTPS configuration much more
convenient. Here are some reference about configuring SSL/HTTPS in IIS:
#On IIS 6.0, how do I configure my website to use SSL?
http://www.petri.co.il/configure_ssl_on_your_website_with_iis.htm
#Configuring SSL on a Web Server or Web Site (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5
6bdf977-14f8-4867-9c51-34c346d48b04.mspx?mfr=true
Sure, https/ssl can be used out of IIS based on the new http.sys
component
in windows and WCF can also uitlize it. However, it will require much
more
configuration which is complex. Here are some reference mentioned about
configurating HTTPS in self-hosted context:
#Configuring HTTP and HTTPS
http://msdn2.microsoft.com/en-us/library/ms733768.aspx
#WCF example: Using of self-hosted service with SSL
http://developers.de/blogs/damir_dobric/archive/2006/08/01/897.aspx
Sincerely,
Steven Cheng
Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you.
Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent
issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each
follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.
--------------------
Reply-To: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
From: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
Subject: WCF webservice over SSL and without
Date: Thu, 3 Apr 2008 23:12:13 -0400
Hi,
I'd like to my WCF webservice to work both on SSL and without.
Unfortunately searching has
led to dead ends, references to changes that only work on the old
previous
beta versions and
I admit I am rather confused and frustrated.
That being said, I'd like some direction in how exactly I'm supposed to
accomplish this.
Thanks very much,
JK
.
- References:
- WCF webservice over SSL and without
- From: Jonathan Kay
- RE: WCF webservice over SSL and without
- From: Steven Cheng [MSFT]
- Re: WCF webservice over SSL and without
- From: Jonathan Kay
- WCF webservice over SSL and without
- Prev by Date: Re: Invoking Web Service from WinForm App VERY slow first call
- Next by Date: Re: WCF Fault not getting generated correctly
- Previous by thread: Re: WCF webservice over SSL and without
- Next by thread: Re: WCF webservice over SSL and without
- Index(es):
Relevant Pages
|
