all groups > dotnet web services enhancements > december 2004 >
You're in the

dotnet web services enhancements

group:

WSE - MakeCert


WSE - MakeCert Kyle Swanton
12/20/2004 9:47:09 PM
dotnet web services enhancements:
Hello all,

I've been having quite a number of issues trying to generate my own
certificates. I'm using Makecert v5.131.3617.0 to generate the
certificate.

Can someone give me a pointer to how I would create a certificate to
use to encrypt a Web Service conversation. (It works using the sample
certificates that ship with the WSE 2.0 samples... I just want to
generate my own.)

Any help would be welcome,

Thanks,
Kyle
RE: WSE - MakeCert K. Mallory
12/21/2004 8:31:01 AM
Sure, go to the command prompt and set the directory to whatever directory
the makecert.exe excecutable is in. The type "makecert.exe" with the
appropriate switches. make sure that you leave a space after each switch like
"-ss loser" and type the resulting cert file at the end with a space between
it and the value of the last switch. If you want the cert to be installed
automatically to the "current user" / "other people" tree, omit the "-sr"
switch. Since you want to use it to encrypt messages I recommend installing
it to the LocalMachine root. S to do that, enter in the makecert.exe with "ss
root" and "-sr LocalMachine" when the cert is finished, close the command
window, double click on the cert file and press the install certificate
button. it should install it to the LocalMachine/Root catagory, if not,
manually select which store to use and put it in the LocalMachine/ "Root
trusted certificates" catagory. There you go! That should do it.


-Kristen


[quoted text, click to view]
Re: WSE - MakeCert K. Mallory
12/23/2004 11:45:04 AM
Sorry, I was just using that as an example, wasn't trying to offend. I
couldn't tell exactly what part of the makecert you having trouble with. But
I'm glad you got it working... Any name space you use with the makecert will
work as long as it is part of the Trusted Root, and your web service
extensions are pointing to the same certificate store as the certificate is
on.

-Kristen

[quoted text, click to view]
Re: WSE - MakeCert Kyle Swanton
12/23/2004 2:38:04 PM
On Tue, 21 Dec 2004 08:31:01 -0800, "K. Mallory"
[quoted text, click to view]

Actually, I did not so much need a lesson on using command line
parameters as I needed to know what parameters to use specifically to
generate a certificate that would work with a WSE 2.0 enabled Web
Service. Not sure what you were trying to say with the '-ss loser'
comment below, but I don't really think it was called for, and I found
it quite immature.

After doing some more research I used the following command to
generate a certificate that works for a Encrypted/signed Web Service
conversation:

makecert -r -pe -n "CN=ARRegSvc" -b 01/01/2000 -e 01/01/2036 -eku
1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft
RSA SChannel Cryptographic Provider" -sy 12

Thanks,
Kyle

[quoted text, click to view]
AddThis Social Bookmark Button