transport-security | 易学教程

The HTTP request was forbidden with client authentication scheme 'Anonymous'

阅读更多关于 The HTTP request was forbidden with client authentication scheme 'Anonymous'

问题 This seams to be a common problem, and I have looked at all the answers here but none have helped. I am trying to get SSL to work with basichttpbinding and WCF service hosted on iis. I think the problem is in iis or with the certificates. I have created a self signed certificate in iis manager. My certificate is called "mycomputer" and have also been placed under Trusted Root Certification. The client have no problem finding the certificate. My settings in iis are to enable anonymous auth,

No solution for Transport Security?

阅读更多关于 No solution for Transport Security?

问题 I have tried all the methods of here for solving the problem of: "Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file." But if I try for example adding this in my plist file: <key>NSAppTransportSecurity</key> <dict> <key>NSExceptionDomains</key> <dict> <key>www.myserver.com</key> <dict>  <key>NSIncludesSubdomains</key> <true/> <!--Include to allow

Classic asp “An error occurred when verifying security for the message.” iis7 transport level security

阅读更多关于 Classic asp “An error occurred when verifying security for the message.” iis7 transport level security

On II7 we host a WCF/asp.net based API. In order to allow users of a classic asp application to connect to the API we had to publish a version we refer to as "transport". This Transport version is written in asp.net too, it points to the same assembly , its just the security layer is different to allow classic asp to authenticate. Transport level security is used as opposed to message based security. When using a browser to load the service reference i can loading the svcutil.exe ... WDSL page. When using my test asp page to call a web method from this reference i get the following returned:

The HTTP request was forbidden with client authentication scheme 'Anonymous'

阅读更多关于 The HTTP request was forbidden with client authentication scheme 'Anonymous'

This seams to be a common problem, and I have looked at all the answers here but none have helped. I am trying to get SSL to work with basichttpbinding and WCF service hosted on iis. I think the problem is in iis or with the certificates. I have created a self signed certificate in iis manager. My certificate is called "mycomputer" and have also been placed under Trusted Root Certification. The client have no problem finding the certificate. My settings in iis are to enable anonymous auth, and disable everything else. Also require SSL and accept client certificate. Is that correct? I get an

Is Transport security a bad practice for the WCF service over the Internet?

阅读更多关于 Is Transport security a bad practice for the WCF service over the Internet?

问题 I have a WCF service accessible over the Internet. It has wsHttpBinding binding and message security mode with username credentials to authenticate clients. The msdn says that we should use message security for the Internet scenarios, because it provides end-to-end security instead of point-to-point security as Transport security has. What if i use transport security for the wcf service over the Internet? Is it a bad practice? Could my data be seen by malicious users? 回答1: No, it would be a

TLS 1.2 on Windows Server 2003 and XP

阅读更多关于 TLS 1.2 on Windows Server 2003 and XP

问题 I have WCF service hosted on IIS which uses transport security. I need to restrict the TLS version to 1.2. I found that TLS 1.2 is supported on Windows Server 2008 and Windows 7. Can I restrict the usage of TLS to version 1.2 for Windows Server 2003 for the server and Windows Vista and XP for the client too? Is 1.2 supported for these older OSes? 回答1: TLS 1.1 and TLS 1.2 are not supported by Win Server 2003, XP or Vista. Applications which use the OS services for TLS will not be able to use

TLS 1.2 on Windows Server 2003 and XP

阅读更多关于 TLS 1.2 on Windows Server 2003 and XP

I have WCF service hosted on IIS which uses transport security. I need to restrict the TLS version to 1.2. I found that TLS 1.2 is supported on Windows Server 2008 and Windows 7. Can I restrict the usage of TLS to version 1.2 for Windows Server 2003 for the server and Windows Vista and XP for the client too? Is 1.2 supported for these older OSes? TLS 1.1 and TLS 1.2 are not supported by Win Server 2003, XP or Vista. Applications which use the OS services for TLS will not be able to use TLS 1.1 or 1.2 on those platforms. If you have an application, a browser or whatever, which handles in it's