WCF - 使用客户端身份验证方案“Anonymous”禁止HTTP请求

时间:2012-11-07 14:24:02

标签: wcf web-services wcf-security

我知道这是一种非常常见的情况,但经过两天的搜索后,我仍未找到解决此问题的方法。

我使用SSL和客户端证书获得了WCF服务和客户端(网站)。

相关服务配置部分:

<system.serviceModel>
    <bindings>
        <basicHttpBinding>
            <binding name="HOLBinding">
                <security mode="Transport">
                    <transport clientCredentialType="Certificate" />
                </security>
            </binding>
        </basicHttpBinding>
    </bindings>
    <behaviors>
      <serviceBehaviors>
        <behavior name="HOLServiceBehaviour">
          <serviceCredentials>
            <clientCertificate>
        <authentication certificateValidationMode="PeerOrChainTrust" trustedStoreLocation="LocalMachine" />
        </clientCertificate>
          </serviceCredentials>
          <serviceMetadata httpGetEnabled="false" httpsGetEnabled="false" />
          <serviceDebug includeExceptionDetailInFaults="false" />
        </behavior>
      </serviceBehaviors>
<services>
      <service name="HOL.Core.Service.HOLService" behaviorConfiguration="HOLServiceBehaviour">
        <endpoint address="bh" bindingConfiguration="HOLBinding" binding="basicHttpBinding" contract="HOL.Core.Service.IHOLService" />
        <endpoint address="wb" behaviorConfiguration="WebBehaviour" binding="webHttpBinding" contract="HOL.Core.Service.IHOLService" />
      </service>
    </services>

相关客户服务配置:

<system.serviceModel>
    <behaviors>
      <endpointBehaviors>
        <behavior name="HOLServiceEndpointBehaviour">
          <clientCredentials>
            <clientCertificate storeLocation="LocalMachine" 
                   findValue="mythumbprint" 
                               x509FindType="FindByThumbprint" storeName="TrustedPeople" />

            <serviceCertificate>
               <authentication certificateValidationMode="PeerOrChainTrust"/>
            </serviceCertificate>
          </clientCredentials>
        </behavior>
      </endpointBehaviors>
    </behaviors>
    <bindings>
      <basicHttpBinding>
        <binding name="BasicHttpBinding_IHOLService" maxBufferPoolSize="20000000" maxReceivedMessageSize="20000000">
            <security mode="Transport">
        <transport clientCredentialType="Certificate" />
         </security>
        </binding>
      </basicHttpBinding>
    </bindings>
    <client>
      <endpoint address="https://www.myhttpsite.co.uk/Service/HOLService.svc/bh" binding="basicHttpBinding" 
                bindingConfiguration="BasicHttpBinding_IHOLService" contract="HOLCoreService.IHOLService" 
                name="BasicHttpBinding_IHOLService" behaviorConfiguration="HOLServiceEndpointBehaviour">
    </endpoint>
    </client>
  </system.serviceModel>

我的证书正在被发现,所以这不是问题(我花了一天时间来解决这个问题!)

我认为错误是调用WCF服务的客户端没有发送正确的详细信息进行身份验证......但为什么?

0 个答案:

没有答案