Hi All,

i am facing some issues related certificates.i need some help to resolve these issues.

Requirements :

security

mode="TransportWithMessageCredential"

binding

binding

name="basicHttpEndpointBinding"

certificateValidationMode

="ChainTrust" revocationMode="Online"

Certificates :

Service Cerificates :

Transportlevel : XXXX.cer my cerificate name is my system DNS name and it is having root node i.e RootTrnCA.cer

this is used to enable https.but am not validationg transport level certificates.

Message Level : services.ca.iim (VXXXX.Cer-->Act.Mac.Ca-->services.ca.iim )

Client Cerificates :

Transportlevel : ZZZZ.cer my cerificate name is my system DNS name and it is having root node i.e RootTrnCA.cer

ignoring transport certificate errors through coading.....

Message Level : client.ca.iim (VXXXX.Cer-->Act.Mac.Ca-->client.ca.iim )

Issues :

1) Response message is not contain Service certificate Signature in Soap header.so i am not able to validate Server certificate details in Client code.

2)if i use the transport with message credential and Chaintrust.i am getting error : The revocation function was unable to check revocation because the revocation server was offline.)

so please very the below service and cleint config and correct me if i am wrong.

Service config :

Client config :

i am attaching certificate through coading :

objProxy.ChannelFactory.Credentials.ClientCertificate.SetCertificate(System.Security.Cryptography.X509Certificates.

StoreLocation.LocalMachine,

System.Security.Cryptography.X509Certificates.

StoreName.My, X509FindType.FindBySubjectName, "client.ca.iim");

            <binding name="XXXXXServiceHost.Http" closeTimeout="00:01:00"
                openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
                allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
                maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
                messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
                useDefaultWebProxy="true">
                <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
                    maxBytesPerRead="4096" maxNameTableCharCount="16384" />
                <security mode="TransportWithMessageCredential">
                    <transport clientCredentialType="None" proxyCredentialType="None"
                        realm="" />
                    <message clientCredentialType="Certificate" algorithmSuite="Default" />
                </security>
            </binding>
        </basicHttpBinding>

    </bindings>
    <client>

        <endpoint address="https://XXXXXX/XXXServiceHost/MemberSvc.svc/soap11"
            binding="basicHttpBinding" bindingConfiguration="XXXServiceHost.Http"
            contract="ServiceReference1.IMemberIBA" name="XXXServiceHost.Http" />
    </client>
</system.serviceModel>Please Verify both and Help me how to resolve above two issues .

Thanks

Babu