wcf - Is client certificate necessary in trusted peoples store when using TransportWithMessageCredential -


i have wcf service securitymode set transportwithmessagecredential.

this working fine when client x509 certificate installed in trusted people store on server side.

removing client certificate store causes messagesecurityexception on client side.

from windows event log boils down securitytokenvalidationexception: id4257

  • validation failed token handler.
  • cert not in trusted people store.
  • cert chain building failed
  • the certificate used has trust chain cannot verified

is expected behavior or there wrong client x509 certificate?

i assuming chain trust established long signing ca of client x509 present on server.

no :

  • override service securitytokenhandler
  • build x509chain own policy , incoming client certificate
  • verify chain @ will

Comments

Popular posts from this blog

toolbar - How to add link to user registration inside toobar in admin joomla 3 custom component -

linux - disk space limitation when creating war file -

How to provide Authorization & Authentication using Asp.net, C#? -