index > ASMX Web Services and XML Serialization > Certificates use when using HTTPS

Certificates use when using HTTPS

Hi all

I guess this is more a general Security Certificate question, but is there really any need in using one against a web service if that web service is running over HTTPS?

I have the following code which associates a Cert against a service, and whether I comment out the code or not, I can still access and use the service.

// Get the Certificate from the Windows Certificate Store
//X509Store objStore = new X509Store(StoreName.Root, StoreLocation.LocalMachine);

// Set store instance as read only.
//objStore.Open(OpenFlags.ReadOnly);

// Pull required certificate
//ColCertificates = objStore.Certificates.Find(X509FindType.FindBySerialNumber, X509CertificateSerialNumber, true);

Thanks

Tryst

Tryst, I believe the code you posted is for applying a client certificate to a proxy, for the purpose of client authentication. I believe this is independent of SSL.

John Saunders
WCF is Web Services. They are not two separate things.
Use WCF for All New Web Service Development, instead of legacy ASMX or obsolete WSE
Use File->New Project to create Web Service Projects

John Saunders

Hi John,

and thanks for the reply.

Yes, I apply this Certificate instance to a property on a service proxy...

// Add client certificate to service instance.
objLindorffService.ClientCertificates.Add(ColCertificates[0]);

So am I doing the wrong this here? I have actually used the supplier certificate (which I download from their website) and used it in a place where I should have place my companies certificate?

Thanks

Tryst

You can use google to search for other answers

Custom Search

More Threads

• How to share classes among clients and multiple web services?

• Writing a C# SOAP client over SSL

• Returning an ArrayList from a WS to AJAX page

• Web Service proxy

• Testing webservice with WS-I tools: BP1212 conformance error

• Web service TimeOut - Does it raise an Exception

• Accessing ASP.NET Configuration Settings Dialog Box programatically

• Problems with NT Authentication

• Get whitespace free SOAP message

• PreAuthenticate, 401's, Integrated windows authentication