Share via

WS Transport Security

  • Article

Download sample

This sample demonstrates the use of SSL transport security with the WSHttpBinding binding. By default, the wsHttpBinding binding provides HTTP communication. When configured for transport security, the binding supports HTTPS communication. This sample is based on the Getting Started Sample that implements a calculator service. The wsHttpBinding is specified and configured in the application configuration files for the client and service.

NoteNote:

The setup procedure and build instructions for this sample are located at the end of this topic.

The program code in the sample is identical to that of the Getting Started Sample service. You must create a certificate and assign it by using the Web Server Certificate Wizard before building and running the sample. The endpoint definition and binding definition in the configuration file settings enable Transport security mode, as shown in the following sample configuration for the client.

<system.serviceModel>
    <client>
        <endpoint name=""
            address="https://localhost/servicemodelsamples/service.svc"
            binding="wsHttpBinding" 
            bindingConfiguration="Binding1" 
            contract="ICalculator" />
    </client>
    <bindings>
        <wsHttpBinding>
            <binding name="Binding1">
                <security mode="Transport">
                    <transport clientCredentialType="None"/>
                </security>
            </binding>
        </wsHttpBinding>
    </bindings>
</system.serviceModel>

The address specified uses the https:// scheme. The binding configuration sets the security mode to Transport. The same security mode must be specified in the service's Web.config file.

Because the certificate used in this sample is a test certificate created with Makecert.exe, a security alert appears when you try to access an https: address, such as https://localhost/servicemodelsamples/service.svc, from your browser. To allow the Windows Communication Foundation (WCF) client to work with a test certificate in place, some additional code has been added to the client to suppress the security alert. This code, and the accompanying class, is not required when using production certificates.

// This code is required only for test certificates like those created by Makecert.exe.
PermissiveCertificatePolicy.Enact("CN=ServiceModelSamples-HTTPS-Server");

When you run the sample, the operation requests and responses are displayed in the client console window. Press ENTER in the client window to shut down the client.

Add(100,15.99) = 115.99
Subtract(145,76.54) = 68.46
Multiply(9,81.25) = 731.25
Divide(22,7) = 3.14285714285714

Press <ENTER> to terminate client.

To set up, build, and run the sample

  1. Ensure that you have performed the One-Time Setup Procedure for the Windows Communication Foundation Samples.

  2. Ensure that you have performed the Internet Information Service (IIS) Server Certificate Installation Instructions.

  3. To build the C# or Visual Basic .NET edition of the solution, follow the instructions in Building the Windows Communication Foundation Samples.

  4. To run the sample in a single- or cross-machine configuration, follow the instructions in Running the Windows Communication Foundation Samples.

Footer image

Send comments about this topic to Microsoft.
© Microsoft Corporation. All rights reserved.