Silverlight WCF with two-way SSL security certificates

Posted by dlang on Stack Overflow See other posts from Stack Overflow or by dlang
Published on 2010-04-02T18:26:59Z Indexed on 2010/04/02 18:33 UTC
Read the original article Hit count: 573

Filed under:

wcf

|

wcf-security

|

ssl

|

ssl-certificate

|

Silverlight

Dear All!

I would like to implement a server - client software with the following security requirements:

WCF-Services need to be secured with SSL and Certificates for both, the server and the client
Client certificates need to be generated programmatically upon user registration
Client-certificates are deployed via a an automatically generated installer-package
Altough the client-certificates are self-signed (no authorized CA for the generation server) the end-user must not add the server-certificate to the trusted certificates in the local Certificate Store

My problems: I cannot find any information regarding establishing such a two-way ssl-security for wcf, while the server-certificate is not signed by an authorized CA and instead is created programmatically with "makecert"...

My question: Is it technically possible to implement this requirements? If yes - could you provide some hints how to get started?

Thank you!

© Stack Overflow or respective owner

Related posts about wcf

wcf + Byte array through wcf service using MTOM

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, How to pass Byte array through wcf service using MTOM..please give me any sample >>> More
Calling a WCF service from another WCF service

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi ! I have a WCF service hosted on a windows service on my Server1. It also has IIS on this machine. I call the service from a web app and it works fine. But within this service, I have to call another WCF sevice (also hosted on a windows service) located on Server2. The security credentials are… >>> More
WCF 4.0 new enhancements over WCF 3.5

as seen on Stack Overflow - Search for 'Stack Overflow'
What are the new enhancements in WCF 4.0 and how easy would it be to upgrade existing WCF services to 4.0? >>> More
Reuse classes and objects for both WCF and non-WCF

as seen on Stack Overflow - Search for 'Stack Overflow'
I have several classes such as Order, Customer, etc. These classes serve for holding data and nothing more. I want to be able to reuse these classes in other projects in the future, but for some reason I don't quite understand, WCF forces me to decorate the data members with the [DataMember] attribute… >>> More
Summarizing client side asynchronous invocations in WCF/WCF Silverlight

as seen on Code Project - Search for 'Code Project'
Summarizing client side asynchronous invocations in WCF/WCF Silverlight. Introducing ServiceClient class. >>> More

Related posts about wcf-security

WCF Security Transport Security Questions

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm writing a set of WCF services that rely on transport security with Windows Authentication using the trusted subsystem model. However, I want to perform authorization based on the original client user that initiated the request (e.g. a user from a website with a username/password). I'm planning… >>> More
How To Configure WCF Security Using Only X.509 Certificates

as seen on Code Project - Search for 'Code Project'
This article provides a step by step guide to configuring a WCF web service and client secured by X.509 certificates. >>> More
WCF security via message headers

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm trying to implement "some sort of" server-client & zero-config security for some WCF service. The best (as well as easiest to me) solution that I found on www is the one described at http://www.dotnetjack.com/post/Automate-passing-valuable-information-in-WCF-headers.aspx (client-side) and… >>> More
WCF security when it is used with sync services

as seen on Stack Overflow - Search for 'Stack Overflow'
I am using following architecture for sync process. http://www.codeproject.com/KB/smart/sync_services.aspx And for server i use WCF service, can anybody guide me how can i secure my wcf service without using certificate that is hosted on IIS. Can i get a way to pass credential or some token to… >>> More
Call WCF using transport layer security and SSL configured

as seen on C# Corner - Search for 'C# Corner'
Wcf Security >>> More