Groups | Blog | Home
all groups > dotnet sdk > december 2004 >

dotnet sdk : Excessive Private Key access prompts when using SSL and web servic



Keith
12/15/2004 12:01:07 PM
I'm having a problem using a X509 certificate for authentication. I am using
a remote web service, via a web service proxy class (Visual Studio generated,
given the WSDL). I access the cert and add it to the ClientCertificates
property of this proxy. This all works fine.

When I first start up, I am prompted by a dialog box informing me that I am
"Signing data with your private exchange key!" and that "An application is
requesting access to a Protected item.", and finally a request for a
password. This is all fine and desired behavior.

After a few minutes however, I am prompted by a second dialog box just like
above. And then a few minutes later, I am prompted again. And then on and
on. I am making multiple calls to the web service but the program is using
the same, initial web service proxy instance (which has the cert already
loaded) so I am not sure why I keep getting prompted. Just to reiterate, the
first dialog box is desired, the others are not.

If anyone has any suggestions on how to get rid of the extra prompts they
would be much appreciated. I've been pouring over forum posts for any help
and it seems like a lot of people have the same question but no verified
solution. I would rather not use the Win32 api but that is a last resort.
My environment is as follows:

OS: win2k
..Net: 1.1
Language: C#
Web Server: WebLogic

thanks,
Keith
12/15/2004 7:23:02 PM
Hi,

I've already tried this. It does not work. Other solutions suggest using
calls to the Win32 Api but I would rather not if possible.

Thanks though.

[quoted text, click to view]
v-phuang NO[at]SPAM online.microsoft.com (
12/16/2004 2:36:19 AM
Hi

Since I am not farmilar Weblogic.
I think you may try to set the HttpWebRequest.PreAuthenticate Property to
true to if that works for you.

You may try to change the webservice proxy's source code with
PreAuthenticate =true.

Here is a link you may take a look which may give you some idea.
http://groups.google.co.jp/groups?hl=zh-CN&lr=&selm=InXJtoVWEHA.2920%40cpmsf
tngxa10.phx.gbl

http://groups.google.co.jp/groups?hl=zh-CN&lr=&selm=SnMpWnjWEHA.328%40cpmsft
ngxa10.phx.gbl

Best regards,

Perter Huang
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
v-phuang NO[at]SPAM online.microsoft.com (
12/17/2004 7:27:19 AM
Hi

So far I think you may try with IIS, I think the Weblogic has the different
behavior with IIS.
e.g.
I guess maybe the weblogic will close every SSL connection after the call
is return. If so, every time we create the SSL connection, we will need to
access to the client certificate which will invoke the dialog.

I am not farmilar with weblogic, I am not sure if there is a Keep alive
similar feature in Weblogic, anyway you may have a try.

Best regards,

Perter Huang
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
AddThis Social Bookmark Button