wcf - Is client certificate necessary in trusted peoples store when using TransportWithMessageCredential -
i have wcf service securitymode set transportwithmessagecredential.
this working fine when client x509 certificate installed in trusted people store on server side.
removing client certificate store causes messagesecurityexception on client side.
from windows event log boils down securitytokenvalidationexception: id4257
- validation failed token handler.
- cert not in trusted people store.
- cert chain building failed
- the certificate used has trust chain cannot verified
is expected behavior or there wrong client x509 certificate?
i assuming chain trust established long signing ca of client x509 present on server.
no :
- override service securitytokenhandler
- build x509chain own policy , incoming client certificate
- verify chain @ will
Comments
Post a Comment