Re: WCF webservice over SSL and without
- From: stcheng@xxxxxxxxxxxxxxxxxxxx (Steven Cheng [MSFT])
- Date: Mon, 07 Apr 2008 03:16:54 GMT
{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\lang2052\f0\fs20 Hi Jonathan,
\par
\par Thanks for your reply. Based on your further description, you have setup the SSL correctly in IIS server, but encountered some problem visit the WCF service's metadata page, correct?
\par
\par I've also performed some test on my local side and I think the following setting should be the cause of the problem:
\par
\par #<serviceMetadata>
\par http://msdn2.microsoft.com/en-us/library/ms731317.aspx
\par
\par For WCF service, you need to use <serviceMetadata> behavior to specify how your service's metadata can be visited by client-side. By default, in the autogenerated service configuration, "httpGetEnabled" is true. However, you also need to enable "httpsGet" since you'll use https/ssl.
\par
\par Here is the behavior setting used in my test WCF service. after enable "httpsGet" , you should be able to visit the WSDL document via https correctly.
\par
\par =========================
\par <behaviors>
\par <serviceBehaviors>
\par <behavior name="ServiceBehavior">
\par
\par <serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
\par
\par
\par </behavior>
\par .............
\par ==========================
\par
\par Hope this helps.
\par
\par Sincerely,
\par
\par Steven Cheng
\par
\par Microsoft MSDN Online Support Lead
\par
\par
\par Delighting our customers is our #1 priority. We welcome your comments and suggestions about how we can improve the support we provide to you. Please feel free to let my manager know what you think of the level of service provided. You can send feedback directly to my manager at: msdnmg@xxxxxxxxxxxxxx
\par
\par ==================================================
\par Get notification to my posts through email? Please refer to http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notifications.
\par
\par ==================================================
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par \pard\li720 --------------------
\par Reply-To: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
\par From: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
\par References: <O5QTyGglIHA.1208@xxxxxxxxxxxxxxxxxxxx> <2SOZQkhlIHA.1036@xxxxxxxxxxxxxxxxxxxxxx>
\par Subject: Re: WCF webservice over SSL and without
\par Date: Fri, 4 Apr 2008 12:58:48 -0400
\par
\par Thank you Steven. Yes I am going to use the IIS method and I do have it already setup for
\par that. I'm also familiar with how to setup a secure site in IIS. Additionally, I've also
\par configured the older ASMX webservices over https via IIS before.
\par
\par However, with this WCF webservice, if I hit the .svc file via IE using the
\par https://server/service.svc link it spits back a http link reference to the WSDL.
\par Even if I rewrite the URL as https://server/services.svc?WSDL, it just sends me to the
\par initial page with the http wsdl link.
\par
\par Surely that can't be right?
\par
\par I'm assuming there's some point of endpoint configuration I need to do. That's the part I'm
\par missing/confused about.
\par -JK
\par
\par "Steven Cheng [MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
\par news:2SOZQkhlIHA.1036@xxxxxxxxxxxxxxxxxxxxxxxxx
\par > Hi Jonathan,
\par >
\par > From your description, you're going to expose your WCF service via both SSL
\par > and non-SSL channel, correct?
\par >
\par > Are you going to use SSL over Http(the most common and convenient
\par > approach)? For non-SSL, I think it is quite straightforward, and what you
\par > need to do is adding a new service endponit that use https/ssl based
\par > address. If hosting in IIS is possible, I recommend you host the https/ssl
\par > one in IIS since that can make the SSL/HTTPS configuration much more
\par > convenient. Here are some reference about configuring SSL/HTTPS in IIS:
\par >
\par > #On IIS 6.0, how do I configure my website to use SSL?
\par > http://www.petri.co.il/configure_ssl_on_your_website_with_iis.htm
\par >
\par > #Configuring SSL on a Web Server or Web Site (IIS 6.0)
\par > http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5
\par > 6bdf977-14f8-4867-9c51-34c346d48b04.mspx?mfr=true
\par >
\par > Sure, https/ssl can be used out of IIS based on the new http.sys component
\par > in windows and WCF can also uitlize it. However, it will require much more
\par > configuration which is complex. Here are some reference mentioned about
\par > configurating HTTPS in self-hosted context:
\par >
\par > #Configuring HTTP and HTTPS
\par > http://msdn2.microsoft.com/en-us/library/ms733768.aspx
\par >
\par > #WCF example: Using of self-hosted service with SSL
\par > http://developers.de/blogs/damir_dobric/archive/2006/08/01/897.aspx
\par >
\par > Sincerely,
\par >
\par > Steven Cheng
\par >
\par > Microsoft MSDN Online Support Lead
\par >
\par >
\par > Delighting our customers is our #1 priority. We welcome your comments and
\par > suggestions about how we can improve the support we provide to you. Please
\par > feel free to let my manager know what you think of the level of service
\par > provided. You can send feedback directly to my manager at:
\par > msdnmg@xxxxxxxxxxxxxx
\par >
\par > ==================================================
\par > Get notification to my posts through email? Please refer to
\par > http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
\par > ications.
\par >
\par > Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
\par > where an initial response from the community or a Microsoft Support
\par > Engineer within 1 business day is acceptable. Please note that each follow
\par > up response may take approximately 2 business days as the support
\par > professional working with you may need further investigation to reach the
\par > most efficient resolution. The offering is not appropriate for situations
\par > that require urgent, real-time or phone-based interactions or complex
\par > project analysis and dump analysis issues. Issues of this nature are best
\par > handled working with a dedicated Microsoft Support Engineer by contacting
\par > Microsoft Customer Support Services (CSS) at
\par > http://msdn.microsoft.com/subscriptions/support/default.aspx.
\par > ==================================================
\par > This posting is provided "AS IS" with no warranties, and confers no rights.
\par >
\par >
\par >
\par >
\par > --------------------
\par > Reply-To: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
\par > From: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
\par > Subject: WCF webservice over SSL and without
\par > Date: Thu, 3 Apr 2008 23:12:13 -0400
\par >
\par >
\par > Hi,
\par >
\par > I'd like to my WCF webservice to work both on SSL and without.
\par > Unfortunately searching has
\par > led to dead ends, references to changes that only work on the old previous
\par > beta versions and
\par > I admit I am rather confused and frustrated.
\par >
\par > That being said, I'd like some direction in how exactly I'm supposed to
\par > accomplish this.
\par >
\par > Thanks very much,
\par > JK
\par >
\par >
\par >
\par
\par \pard
\par
\par }
- References:
- WCF webservice over SSL and without
- From: Jonathan Kay
- RE: WCF webservice over SSL and without
- From: Steven Cheng [MSFT]
- Re: WCF webservice over SSL and without
- From: Jonathan Kay
- WCF webservice over SSL and without
- Prev by Date: every webservice call taking 5 seconds
- Next by Date: Nullable fields, and circular references support
- Previous by thread: Re: WCF webservice over SSL and without
- Next by thread: Re: WCF webservice over SSL and without
- Index(es):
Relevant Pages
|