Https证书错误，IIS上的WCF服务

我想组织客户端和WCF服务之间的安全连接。必须确保客户能够信任该服务。Https证书错误，IIS上的WCF服务

我已经为本地机器上的Trusted Root和Personal存储创建了两个证书。我可以在证书加载项中看到正确的证书路径。证书通用名是localhost。

我在IIS上添加了https绑定。

我有以下配置

行为

<behavior name="AgencyTrustedServiceBehavior"> 
     <dataContractSerializer maxItemsInObjectGraph="10000000" /> 
     <serviceMetadata httpsGetEnabled="true" policyVersion="Policy15" /> 
     <serviceDebug includeExceptionDetailInFaults="true" /> 

     <serviceCredentials> 
     <clientCertificate> 
      <authentication certificateValidationMode="None" /> 
     </clientCertificate> 

     <serviceCertificate findValue="localhost" storeLocation="LocalMachine" storeName="My" x509FindType="FindBySubjectName" /> 

     </serviceCredentials> 
    </behavior>

绑定

<wsHttpBinding> 
    <binding name="InternetServiceBinding" closeTimeout="00:10:00" 
      openTimeout="00:10:00" sendTimeout="00:10:00" bypassProxyOnLocal="true" 
      maxBufferPoolSize="2147483647" maxReceivedMessageSize="2147483647" 
      messageEncoding="Mtom"> 
     <readerQuotas maxDepth="2147483647" maxStringContentLength="2147483647" 
     maxArrayLength="2147483647" maxBytesPerRead="2147483647" maxNameTableCharCount="2147483647" /> 
     <security mode="Transport"> 
     <transport clientCredentialType="None"> 
      <extendedProtectionPolicy policyEnforcement="Never" /> 
     </transport> 
     </security> 
    </binding> 
    </wsHttpBinding>

端点

<service behaviorConfiguration="AgencyTrustedServiceBehavior" name="Megatec.MasterTourService.AuthService"> 
    <endpoint address="Anonymous" 
       binding="wsHttpBinding" 
       bindingConfiguration="InternetServiceBinding" 
       name="Megatec.MasterTourService.Contracts.IAuthServiceAnonymous" 
       contract="Megatec.MasterTourService.Contracts.IAuthService"> 
    </endpoint> 
    </service>

但是，该服务时，我尝试访问该服务B使用WCFTestClient Y，它抛出以下异常

There was no endpoint listening at http://localhost/IISTest/AuthService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. The remote server returned an error: (404) Not Found. 

HTTP GET Error URI: http://localhost/IISTest/AuthService.svc The document at the url http://localhost/IISTest/AuthService.svc was not recognized as a known document type.The error message from each known type may help you fix the problem: 
- Report from 'XML Schema' is 'The document format is not recognized (the content type is 'text/html; charset=UTF-8').'. 
- Report from 'DISCO Document' is 'There was an error downloading 'https://dev4-10.megatec.ru/IISTest/AuthService.svc?disco'.'. 
- The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. 
- The remote certificate is invalid according to the validation procedure. 
- Report from 'http://localhost/IISTest/AuthService.svc' is 'The document format is not recognized (the content type is 'text/html; charset=UTF-8').'. 
- Report from 'WSDL Document' is 'The document format is not recognized (the content type is 'text/html; charset=UTF-8').'.

有什么不好？

来源

2012-12-26 Sir Hally

对于初学者，你不应该使用https吗？ –

我使用https。我已经为IIS添加了https绑定（使用此证书），我尝试访问https：//localhost/IISTest/AuthService.svc地址 –

客户端打的网址是：

的 “http：//本地主机/ IISTest/AuthService”

应该

“https：//开头本地主机/ IISTest/AuthService”

来源

2012-12-26 12:09:42

我解决了这个问题 - WCF测试客户端自动使用http：// localhost/IISTest /AuthService.svc而不是https：//localhost/IISTest/AuthService.svc。当我添加了地址为https：// localhost/IISTest/AuthService的服务时，它可以正常工作。 –

Https证书错误，IIS上的WCF服务

回答

相关问题