[Mono-list] HttpWebRequest and client certificates

[Samuel CARRIERE]

Hi Sebastien,You are working a lot quicker than me !I was preparing the test case (it was not so simple to find a public ssl web service !), and was about to open a bug report.Ok, i will try your patch as soon as possible.Thank's a lot,Samuel> Date: Wed, 9 May 2007 13:43:53 -0400> From: sebastien.pouliot at gmail.com> Subject: Re: [Mono-list] HttpWebRequest and client certificates> To: samuel_carriere at hotmail.com> CC: mono-list at lists.ximian.com> > Bonjour Samuel,> > I did commit the hack into SVN and it does work with XSP(*). Let me know> if this works, or not, in your web service scenario.> > (*) http://www.mono-project.com/UsingClientCertificatesWithXSP> wiki page was updated to reflect this> > Sebastien> > On Mon, 2007-05-07 at 13:25 -0400, Sebastien Pouliot wrote:> > Bonjour Samuel,> > > > On Wed, 2007-05-02 at 14:29 +0200, Samuel CARRIERE wrote:> > > > 5 days to get this email ? I guess/hope you're not subscribed to the> > list.> > > > > >On Mon, 2007-03-12 at 17:46 +0100, Michal Ziemski wrote:> > > >> Hi!> > > >> > > > >> Does HttpWebRequest support client certificates in mono?> > > >> Th FAQ > > > >>> > > (http://www.mono-project.com/FAQ:_Security#Are_SSL_client_certificates_supported_.3F)> > > >> states it doesn't in 1.1, but might in 2.0> > > >> > > > >> Does it work in 2.0?> > > >> > > >There as been progress, both for the new X509Certificate2 and> > > X509Store> > > >classes, but the HttpWebRequest code hasn't yet been updated. This> > > part> > > >is somewhat interlocked with the new SslStream class (2.0) and how> > > we'll> > > >provide it. > > > >> > > >However at this stage it may be possible to make a quick hack to add> > > >client-side certificate support for *some* 2.0 apps (depending on how> > > >the certificate is loaded).> > > >> > > >> > > > >> Cheers!> > > >> Michal Ziemski> > > >> > > >  > > > Hi everybody,> > >  > > > I am working on a C# mono application that needs client certificates> > > to call a webservice.> > > Sebastien, can you explain a bit what sort of "quick hack" it may be> > > possible to make, to> > > make this following test code work ?> > >  > > >  static void Main(string[] args)> > >  {> > >     // Instanciate webservice client> > >     WSAddition.Addition client = new testWsSSL.WSAddition.Addition();> > >     X509Certificate2 Cert = new> > > X509Certificate2("/my/clientCertificate.p12", "password");> > >     client.ClientCertificates.Add(Cert); > > >     // Call webservice method> > >     int result = client.add(5,6);> > >     Console.WriteLine("Result : " + result);> > >  }> > > > > > Does it require to hack the HttpWebRequest class ?> > > > Yes, but it should be simple. The hack is to supply the private key> > (available from X509Certificate2) to the SSL code.> > > > It would probably take me much longer to set up a client and server web> > service to test it than to implement it. However if you open a bug> > report (http://bugzilla.ximian.com) with a client, working with a public> > SSL/client certificate web service, I should be able to add this fairly> > quickly.> 
_________________________________________________________________
Essayez Live.com et créez l'Internet qui vous ressemble : infos, sports, météo et bien plus encore !
http://www.live.com/getstarted
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ximian.com/pipermail/mono-list/attachments/20070511/3d436e0f/attachment.html