Re: WCF webservice over SSL and without



Hi Steven and Tiago,

Sorry for the late response, I've been away for a bit and this got put on the backburner.

Thanks to both of you, I've managed to get https working (almost). I think perhaps I'm still
doing something wrong?

After adding httpsGetEnabled="true, it works beautifully, however, it spits out
https://machinename/filename.svc?wsdl which won't work from the public internet.

So to change this, among the other things I've attempted, I tried using httpsGetUrl and was
presented with this:
A registration already exists for URI 'https://machinename/file.svc'.

I've tried other things (baseAddress, etc.) and none of it seems to change it...

Thanks,
JK

"Steven Cheng [MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:ifXunQimIHA.8872@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Jonathan,

Have you got any progress on this or does the suggestion in my last reply
help some?

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Reply-To: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
From: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
References: <O5QTyGglIHA.1208@xxxxxxxxxxxxxxxxxxxx>
<2SOZQkhlIHA.1036@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: WCF webservice over SSL and without
Date: Fri, 4 Apr 2008 12:58:48 -0400


Thank you Steven. Yes I am going to use the IIS method and I do have it
already setup for
that. I'm also familiar with how to setup a secure site in IIS.
Additionally, I've also
configured the older ASMX webservices over https via IIS before.

However, with this WCF webservice, if I hit the .svc file via IE using the
https://server/service.svc link it spits back a http link reference to the
WSDL.
Even if I rewrite the URL as https://server/services.svc?WSDL, it just
sends me to the
initial page with the http wsdl link.

Surely that can't be right?

I'm assuming there's some point of endpoint configuration I need to do.
That's the part I'm
missing/confused about.
-JK

"Steven Cheng [MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:2SOZQkhlIHA.1036@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Jonathan,

From your description, you're going to expose your WCF service via both
SSL
and non-SSL channel, correct?

Are you going to use SSL over Http(the most common and convenient
approach)? For non-SSL, I think it is quite straightforward, and what you
need to do is adding a new service endponit that use https/ssl based
address. If hosting in IIS is possible, I recommend you host the
https/ssl
one in IIS since that can make the SSL/HTTPS configuration much more
convenient. Here are some reference about configuring SSL/HTTPS in IIS:

#On IIS 6.0, how do I configure my website to use SSL?
http://www.petri.co.il/configure_ssl_on_your_website_with_iis.htm

#Configuring SSL on a Web Server or Web Site (IIS 6.0)

http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5
6bdf977-14f8-4867-9c51-34c346d48b04.mspx?mfr=true

Sure, https/ssl can be used out of IIS based on the new http.sys component
in windows and WCF can also uitlize it. However, it will require much more
configuration which is complex. Here are some reference mentioned about
configurating HTTPS in self-hosted context:

#Configuring HTTP and HTTPS
http://msdn2.microsoft.com/en-us/library/ms733768.aspx

#WCF example: Using of self-hosted service with SSL
http://developers.de/blogs/damir_dobric/archive/2006/08/01/897.aspx

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

==================================================
Get notification to my posts through email? Please refer to

http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.




--------------------
Reply-To: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
From: "Jonathan Kay" <jonathankay@xxxxxxxxxxxxxxxx>
Subject: WCF webservice over SSL and without
Date: Thu, 3 Apr 2008 23:12:13 -0400


Hi,

I'd like to my WCF webservice to work both on SSL and without.
Unfortunately searching has
led to dead ends, references to changes that only work on the old previous
beta versions and
I admit I am rather confused and frustrated.

That being said, I'd like some direction in how exactly I'm supposed to
accomplish this.

Thanks very much,
JK






.



Relevant Pages

  • Re: WCF webservice over SSL and without
    ... Based on your further description, you have setup the SSL correctly in IIS server, but encountered some problem visit the WCF service's metadata page, correct? ... \par> Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: WCF webservice over SSL and without
    ... encryption/signature is handled by SOAP instead of HTTP (IIS) and should be ... I'm assuming there's some point of endpoint configuration I need to do. ... Are you going to use SSL over Http(the most common and convenient ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: SBS and SSL v.3.0
    ... I wasn't sure if it was IIS or IE based on the follow up by Cris. ... IIS 6.0 will indeed support SSL v.3.. ... Then what are they thinking when they recommend SSL v3.0 ?? ...
    (microsoft.public.windows.server.sbs)
  • Re: WCF webservice over SSL and without
    ... I'm also familiar with how to setup a secure site in IIS. ... I'm assuming there's some point of endpoint configuration I need to do. ... you're going to expose your WCF service via both SSL ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Cant create web applications
    ... I've managed to re create an autosigned certificate and assigned it to the web application from the IIS 7 manager (it was already created with SSL and has the link with https, I just modified the link to add the cert.), but when I try to access the site, after the certificate warning, I receive a 403-Forbidden error. ...
    (microsoft.public.sharepoint.windowsservices)