all groups > dotnet web services enhancements > january 2005 >
You're in the

dotnet web services enhancements

group:

WSE 2.0 and alternate X.509 cert store locations


WSE 2.0 and alternate X.509 cert store locations eshayne NO[at]SPAM bigfoot.com
1/14/2005 12:37:46 PM
dotnet web services enhancements:
I would like to use WSE 2.0 for signing and encrypting Web service
messages using X.509 certificates. It appears that my only options when
doing this are to tell my Web service to look for certificates in
either the LocalMachine or CurrentUser stores that Windows provides.

If I would like to instead store my certificates somewhere else, such
as an OpenLDAP server, or a different certificate store, is that an
option? How can I tell WSE to look somewhere else for certificates? If
I can't set a different value in the "x509 storeLocation" web.config
node, can I override a method from WebService or something?
Thanks,
Ethan
Re: WSE 2.0 and alternate X.509 cert store locations Hernan de Lahitte
1/14/2005 5:53:42 PM
You may create a custom security token manager to access the certs
repository.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wse/html/3630a570-6cc2-4d8a-8194-1fe59a0e1e00.asp
http://msdn.microsoft.com/msdnmag/issues/04/10/servicestation/default.aspx


--
Hernan de Lahitte
http://weblogs.asp.net/hernandl
http://www.lagash.com/english/index.html


[quoted text, click to view]

Re: WSE 2.0 and alternate X.509 cert store locations eshayne NO[at]SPAM bigfoot.com
1/18/2005 10:43:20 AM
Thanks!

Can you (or anyone else) tell me what "qname" value to use in my
web.config, to point to my custom X.509 security token manager?

Thanks,
Ethan

[quoted text, click to view]
Re: WSE 2.0 and alternate X.509 cert store locations eshayne NO[at]SPAM bigfoot.com
1/18/2005 12:42:28 PM
Thank you for the pointers.

Once I create a new security token manager (presumably subclassed from
X509SecurityTokenManager), which method(s) would I want to override?

What I'm trying to do is take an incoming Soap message that has been
signed using an X.509 certificate (private key), and authenticate that
signature. I'll probably also want to do something similar where the
incoming message has been encrypted using an X.509 certificate (public
key), and decrypt it. The way WSE normally does this is just fine - all
I want to change is where it goes to load the appropriate X.509
certificate (corresponding public or private key) from. I'm not clear
on where this particular part of the process happens?

Thanks,
Ethan

[quoted text, click to view]
Re: WSE 2.0 and alternate X.509 cert store locations Dilip Krishnan
1/18/2005 7:13:59 PM
Hello Ethan,
If its x509 then it should just be the same qname as it normally is

HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
http://www.geniant.com

[quoted text, click to view]

Re: WSE 2.0 and alternate X.509 cert store locations Chris Rolon
1/23/2005 9:07:08 PM
You need to override the AuthenticateToken method.

Chris Rolon

[quoted text, click to view]

AddThis Social Bookmark Button