Hi Gary,
As for using Certificate in Webservice, I'd like to confirm the detailed
problem scenario in your environment.
Generally, you can use x509 certificate for authentication via using the
https/ssl transport layer security. For example, you can setup the
webservice in IIS to se ssl/https. And you can supply certificate in client
code (if server-side require client to provide certificate). Here are some
reference article on this:
#How to call a Web service by using a client certificate for authentication
in an ASP.NET Web application
http://support.microsoft.com/?id=901183
#Using client certificates with ASP.NET
http://geekswithblogs.net/lorint/archive/2005/12/30/64516.aspx
If you want to use X509 certificate to perform custom security (such as
encryption or signing), ASP.NET webservice doesn't directly certificate
integrity. There is an add-on component called "Web Service Enhancement"
(so far the latest version is 3.0 for .net framework 2.0). You can use it
to add certiciate and message layer securityt functionality for your
Webservice:
#Security Features in WSE 3.0
http://msdn.microsoft.com/en-us/magazine/cc300773.aspx
#Implementing Message Layer Security with X.509 Certificates in WSE 3.0
http://msdn.microsoft.com/en-us/library/aa480581.aspx
BTW, will WCF also be a possible option for you as Gregory suggested? So
far WSE is not updating and WCF provide more support on security such as
certificate.
Sincerely,
Steven Cheng
Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://support.microsoft.com/select/default.aspx?target=assistance&ln=en-us.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
