SSL and web Services

[Thomas Connolly]

I have a web Service that is accessing an Oracle back-end
database through a Forte layer via SOAP and XML. The
clients access the web service through SSL and it returns
the data it has recieved from the Forte layer. On test
machines (Windows 2000 Pro) there is no problem. The SSL
works fine, the web service returns the pages and data
without any problems. When I deployed the application to
the server (Win2K Server) the page returns with no data.
Somewhere, there is a problem retriving data from the
Forte layer to the Web Service. can this be an SSL
issue? Has anyone had any experience with anything such
as this? Any help or ideas would be greatly appreciated.
Brainstorm ideas welcome also!!!

Thanks in advance,
Tom

 

[Thomas Connolly]

Steve,
I really appreciate your reply. As I am a novice at SSL,
can you give some more detail? For example, namespaces to
add, where this code goes and what it does, etc.

Again, thank you.

Tom

-----Original Message-----
I don't believe IIS in windows Pro supports true SSL. Only Windows Server does.
You may need some code like this to support the web service call with SSL enabled:


'Set the web service's Credentials to Windows credentials

of the user calling this application

wsProxy.Credentials = CredentialCache.DefaultCredentials



'Set the client's certificate

If sCertName.Length <> 0 Then

Dim x509 As X509Certificate = X509Certificate.CreateFromCertFile(sCertName)

wsProxy.ClientCertificates.Add(x509)

End If


--
I hope this helps,
Steve C. Orr, MCSD
http://Steve.Orr.net





"Thomas Connolly" <[email protected]>

wrote in message [email protected]...

 

[Steve C. Orr, MCSD]

This code goes right before you call the web service. In this example the
web service reference is named wsProxy.
The namespace you need is System.Security.Cryptography.X509Certificates
This code takes care of the client certificate "stuff" that is needed on the
client side for secure communication. Normally, when surfing the web, the
web browser would take care of this. But in this case the web service
client is not a web browser so you must do it manually.

 

[Thomas Connolly]

Hello again Steve,
Can you please explain to me what sCertName is and where
it comes from?

Thank you,
Thomas

 

[Steve C. Orr, MCSD]

Well, it's the name of your cert.
Here are some links that should help you with the process of setting up SSL
in your app:

Step-by-Step Guide to Managing Active Directory
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/manadsteps.asp

Step-by-Step Guide to Setting up a Certification Authority
http://www.microsoft.com/windows2000/techinfo/planning/security/casetupsteps.asp

Step-by-Step Guide to Certificate Services Web Pages
http://www.microsoft.com/windows2000/techinfo/planning/security/cawebsteps.asp

Step-by-Step Guide to Advanced Certificate Management
http://www.microsoft.com/windows2000/techinfo/planning/security/advcertsteps.asp

Step-by-Step Guide to Mapping Certificates to User Accounts
http://www.microsoft.com/windows2000/techinfo/planning/security/mappingcerts.asp

 

[Joerg Jooss]

"Steve C. Orr, MCSD" spoke:

I don't believe IIS in windows Pro supports true SSL.

What's "true" SSL? Provided you have a certificate, you can run IIS on
Pro with SSL.

Cheers,