i just started using wse 3.0 and have a question how come when i use proxy = new proxy() instead of proxyWse() it lets the user consume the web service? i want to be able to block access to the web service to everyone without the servers public key?...more >>

Hello, I'm using WSE3 in an application and I've setup some policies to enforce security and compression while transferring data. Everything works great between client and server applications. However if I go to Internet Explorer, type the service address and invoke any method, I receive d...more >>

Hi everyone! I experience an interesting behaviour of WSE 2.0 when sending WS-Security compliant SOAP messages over the wire. My messaging system is as simple as SoapClient class on client side and SoapService class on server side. The communication between client and server is as follows: cl...more >>

Hello ! I am new in Webservices. I have to provide a webmethod via ssl that is called by another company (php). I want to create a web service with Visual Studio 2003 and WSE 2.0 SP3. Are this the right tools for this ? I want that the user have to send username/password to authenticat...more >>

Hi. I'm developing a winform app that communicates with a secure web service using WSE 3.0. I'm trying to implement Direct Authentication with UsernameToken. I'm also trying to establish the message integrity using usernameForCertificateSecurity turnkey security. One fact is that I don't...more >>

Quick question - Can a WSE 3.0 enabled web service successfully run on the ASP.NET Development Server that is included in Visual Studio 2005? Or would it be better to lunach the Web Service to IIS (in my case, 6.0)? Thanks, Frank V. JawzX01[.@.]gmail.com www.TheOpenSourceU.com ...more >>

Documentation about <timeToleranceInSeconds> Element says: "Use the <timeToleranceInSeconds> element when there is a clock difference between the SOAP message sender and receiver.WSE invalidates SOAP messages that have expired or are created in the future during its message validation phase...more >>

Hi there, I'm using UsernameForCertificateAssertion and I have problem understanding few things about processing SOAP messages, algorithms, keys etc. 1) I don't see any connection between any ID values of SOAP headers in OutputTrace and InputTrace.webinfo. Shouldn't some IDs match, at least...more >>

Hi all, I have a scenario where my framework was developed on WSE 2.0 SP3 standards. Now we are migrating the same to WSE 3.0 standards. There are existing WSE 2.0 SP3 services that is already up and running. Is there a way that i can reuse the existing WSE 2.0 SP3 services with the new fra...more >>

Hi All, This is probably a very easy issue to sort out but at the moment I am lost with it. I am trying to use a policy file on a web service which states that the default endpoint must be signed by a UsernameToken. I specified the username in the wizard and used the following code in my ...more >>

We have a multi tier application spread over multiple servers. As pr today the clients (IE 6) have used Integrated (NTLM) autentication against IIS running the presentation layer. Each layer is communicating with the next layer using WSE3 web services. We are using kerberos for delegated authent...more >>

Hi, Can you tell me how the WSE3.0 build the security context to send and receive multiple messages between Service & Client. What does information include into it? Thanks for your help, Hung....more >>

Hello all, I'm attempting to learn how to use WSE 3.0 with Visual Studio 2005. I've read a lot of material about WSE 3.0 and I've started to grasp how this libarary works. Although, much closer than I was a few days ago I'm not in at a point where I believe everything is configured proper...more >>

Hi Is it possible for the client to decide whether to do encryption and signing of messages? If so, how do I do it? Background: I got a webservice that is called from winform clients for whom I want encrypt and sign the messages. The webservice is also called by another webservice and in tha...more >>

I've created my own Assertion using UsernameToken (I use 512 bit passwords that aren't sent over the wire and are unique per session and the data is encrypted in my assertion). In that new assertion, I've implimented SecureConversation by using the following: SecureConversationServiceSendSe...more >>

Hi, I have some problem with the encrypted key and derived Key. With <AnonymousForCertificateAssertion> element: - Is encrypted key generated from the web service public key? and what is the algorithm used for generating? - If I set the attribute "requireDerivedKeys=true" in the <AnonymousFo...more >>

I have a webservice that i talk to (there are two seperate wsdls).. and am using WSE3. I can sucessfully use the proxy to generate the authentication call to the first wsdl site, and that returns something like: <![CDATA[<Assertion MinorVersion="1" MajorVersion="1" Issuer="http://www.bea.com/...more >>

Hello All, Can anyone direct me towards a good, comprehensive introduction to WSE 3.0? Thanks, Frank www.TheOpenSourceU.com...more >>

I'm working in a Mutual X509 context, i can define the authorized clients into the wse policy config file using something like: <authorization> <allow user="CN=WSE2QuickStartClient" /> <deny user="*" /> </authorization> But i want add programmatically the users a...more >>

I have successfully created my makecert generated certificate and used it to sign my SOAP Request for an Java Axis web service but when the WS authors actually started checking versus their CA my certificate failed. 1. They are telling me to generate a private key 2. send a csr to them to si...more >>

I'm using MS WSE 3.0. I'm unable to call my webservices because I get the folllowing exception: System.FormatException : WSE839: An HTTP response was received that used the following content type: text/xml; charset=utf-8. The following content type was expected: multipart/related; type=applic...more >>

I'm getting some strange behavior when making multiple async calls coming from threads from the thread pool on a WinApp Client. The Event Log has the following events: Event Type: Warning Event Source: ASP.NET 2.0.50727.0 Event Category: Web Event Event ID: 1309 Date: 6/18/2006 Time: ...more >>

I'm building a custom policy assertion, that I want to use to evaluate my soap message and return a soap fault if there is something wrong. But how do I return a soap fault from a SoapFilter ProcessMessage method? I tried throwing a Exception, but that crashes my host application. I also tried...more >>

I upgraded all my 2003 projects to vs 2005 and all went well except for one machine that I got the following error: System.Configuration.ConfigurationException: WSE032: There was an error loading the microsoft.web.services2 configuration section. ---> System.Configuration.ConfigurationErrorsE...more >>

The WSE3 documentation points out that, in my server-side policy file, I can insist that a client has a particular certificate via an entry like: <authorization> <allow user="CN=ClientCert"/> <deny user="*"/> </authorization> But the documentation does not specify the store locati...more >>

Does anyone know what happens behind the scenes when a WSE 3.0 Web service is referenced from a likewise WSE 3.0 enabled Web service consumer? I know that two proxy classes are generated when the Web Reference is added/updated, one WSE enabled class derived from Microsoft.Web.Services3.WebSe...more >>

Hi, I have read the below help to create a custom <replayDetection> element http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/WSS_Ch5_ImpMsgReplayDet_WSE30.asp But I am confusing about the above custom element and <replayDection> from this link http://msdn.microso...more >>

The <replayDetection> Element has the following attribute: windowInSeconds Required attribute. The time in seconds that replay detection is enabled against the UsernameToken nonce. (MSDN.MICROSOFT.COM) So, The replay attack just affects on UsernameToken security? For ex: UsernameForCe...more >>

I have walked through all of the WSE 3 Hands on Labs and got everything working fine. When I create my own certificate and install it in the stores, my client application that is consuming my WSE enabled webservice receives the following error (noted at the very bottom of this post). My o...more >>

Hello: I have a Web service that use WSE 3.0 to authenticate client with x509 certificates. The problem is that some customers of this web service has their applications in .Net 1.1 and they cannot migrate to .Net 2.0. How can I invoke the web service using WSE 2.0. We only authenti...more >>

Hello, I'm trying to follow the WSE 3.0 Labs to implement the secure-conversation. In the Basic Labs Part 2, when the attribute establishSecurityContext is set to false in the config file, the application is working fine and able to retrieve results from the webservice. But once the attribute...more >>

Hi, in the WSE 3.0, I have read: "On outbound messages, a Timestamp represents the time the message was sent and the expiration time. On inbound messages, it stamps the received time, checks for expiration, and adds the delay". I really don't understand the way WSE use the Timestamp! Whe...more >>

I am trying to do an authentication using C# through a Web Service in WSE3.0 and I am (client side) is getting 415 error. Does anyone know why this is happening??? Thanks. ...more >>

Hi, I really don't understand why we need to sign the SOAP header? Can you explain ? THhanks, Hung....more >>

Hello, I had done a lot of experimenting with WSE 2.0 and it all seemed to work after a fashion. I have recently installed WSE 3.0 and went through the setup several times to try an figure out why the X.509 certs don't seem to be working correctly. I have a simple HelloWorld program that I ...more >>

Hi, I would like to generate new x509 certificate from the machine's Root Certificate from my code. Is there any API I can call to do that? I know I can write script to use "makecert.exe" to create new x509 certificate, but I want to do that within my c# code. Thanks in advance, Syed....more >>

I've built a Web Service using the new VS.NET 2005 Contract-First methodology - define an Interface, put the "WebMethod" attributes on there, and than have a concrete class implement the interface. This works great, and really helps with versioning issues. The problem is, I'm trying to get ...more >>

I need to build an infrastructure that moves large files around the Internet. The scenario is many clients all submitting information to a single server. The data in question is confidential, so encryption and signatures are important. Customers currently write data to magnetic tape and have...more >>

Hello, We are finishing our application server built using WSE 3.0. Although many of our clients do have IIS has a viable option, others do not. I have read the document "Host and ASP.NET Web Service Outside of IIS" at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wse3.0...more >>

Hi programmers, I'm quite new in this blog, I have a question concerning web services Soap Exceptions: I created a class MySoapException derived from SoapException, I add the references both server-side and client-side, and I tried to implement correctly serialization, I mean, the "ability" of a...more >>

Hi, I have a problem - I have a .net web site which implements the MVC pattern. Thus, I have a class library controller which is in charge of all the web services/wse communications. The problem is the controller runs under the context of the web site and the configuration in the app.config ...more >>

Hi, With Https protocol, the server will send it's certificate to client whenever receiving a request of a new client. When using WSE3.0 with Certificate assertion, the client must have the server certificate ? and server must have client certificte? I'm not sure about this, can you help ...more >>

Hi, I have 2 questions regarding WSE 3.0: 1) Using sct with asp.net application as client - I implemented sct with an asp.net web application as a client. I can see in the trace files that the element <wst:RequestSecurityToken> gets created each time I invoke the specific web method with the...more >>

Hi, I'm developing an application that needs to upload a dataSet or datatables at the end of the day. I'm going to use Windows Mobile 5 and Net Framework 2.0 and visual studio 2005 and sqlserver2000. I'd like to implement a Webservice, but I couldn' find a way of upload a DataTable to ...more >>

Has anyone been able to get WSE 3.0 to install on a Windows Vista machine? All the variations I've tried result only in an error: Product: Microsoft WSE 3.0 -- Error 1721.There is a problem with this Windows Installer package. A program required for this install to complete could not be run. C...more >>

Hi, I am trying to use a custom soap transport, in this case an http.sys transport, based Aaron Skinnard's MSDN example. I want to remove the need for the app.config file, so programmatically add the transport, using WebServicesConfiguration.MessagingConfiguration.AddTransport("http", ty...more >>

I would like to know how can I see the messages that are send to web services and what client program is receiving? I am using WSE3.0/VS2005/C# Thanks. ...more >>

Hi All, I was using a token which contains more than user name and password. I was doing token = CustomToken(name, pass, age);//my class RequestSoapContext.Security.Tokens.Add(token); RequestSoapContext.Security.Elements.Add(new MessageSignature(token)); with this it was working fine in ...more >>

Hi, I've been trying to implement xml messaging and stumbled on this article "Introducing the Web Services Enhancements 2.0 Messaging API". When creating the soap envelope and setting the SoapAction this is how its done. SoapEnvelope env = CreateAddMessage(); env.Context.Action = "urn:ma...more >>

Hello all. I was working through the labs (Messageing/Security) which are provided on WSE 3.0 Page. All the samples where very clear and all worked fine. But in these Samples if you want to use a Username/Password Policy, the Credentials are automatically tested against Windows Accounts. I...more >>