Consuming HTTPS web service using WCF -

-

i'm trying consuming client's web service using wcf. client's web service done on https, , can consume fine following binding:

<bindings>   <basichttpbinding>     <binding name="purchaseordersoap" closetimeout="00:01:00" opentimeout="00:01:00"         receivetimeout="00:10:00" sendtimeout="00:01:00" allowcookies="false"         bypassproxyonlocal="false" hostnamecomparisonmode="strongwildcard"         maxbuffersize="65536" maxbufferpoolsize="524288" maxreceivedmessagesize="65536"         messageencoding="text" textencoding="utf-8" transfermode="buffered"         usedefaultwebproxy="true">       <readerquotas maxdepth="32" maxstringcontentlength="8192" maxarraylength="16384"           maxbytesperread="4096" maxnametablecharcount="16384" />       <security mode="transport" />     </binding>   </basichttpbinding> </bindings>

however, our security team have told me need use message or transportwithmessagecredential security, because fortify 360 complains transport security weak.

when try meesage error:

system.invalidoperationexception: basichttp binding requires  basichttpbinding.security.message.clientcredentialtype equivalent  basichttpmessagecredentialtype.certificate credential type secure messages. select  transport or transportwithmessagecredential security username credentials.

and transportwithmessagecredential following error:

system.invalidoperationexception: username not provided. specify username in  clientcredentials.

i've not got username/password (i can connect fine in browser), question is:

can use message or transportwithmessagecredentials when consuming existing https web service (without publisher making changes)? if so, changes need make configuration?

edited clarify question.

if cannot third party vendor add endpoint service supports message security stuck. seems support basichttpbinding transport level security.

transport security not "less" secure message level security. message level security means contents of soap message encrypted. allows either store or relay message in clear text way , still assured no 1 can peek @ message. if doing communicating between system , vendor on internet transport , message level security equally secure.


Comments

Post a Comment

Popular posts from this blog

php - What is the difference between $_SERVER['PATH_INFO'] and $_SERVER['ORIG_PATH_INFO']? -

-
what’s difference between $_server['path_info'] , $_server['orig_path_info'] ? how use them? when run print_r($_server) , path_info , orig_path_info not present in array. why not? how can enable them? i have read php manual on them, still don’t understand them. the path_info variable present if invoke php script this: http://www.example.com/phpinfo.php/hello_there it's /hello_there part after .php script. if don't invoke url that, there won't $_server["path_info"] environment variable. the porig_ prefix uncommon. path_info standard cgi-environment variable, , should never prefixed. did read that? (there issues around php3/php4 if invoked php interpreter via cgi-bin/ - hardly has such setups today.) for reference: http://www.ietf.org/rfc/rfc3875
Read more

fortran - Function return type mismatch -

-
i'm attempting recode old c++ program in fortran make use of lapack (i'm aware c++ have lapack++, i'm having lot of trouble installing it, gave up). i didn't have problems compilation, when had variables declared real . when started coding section of program required lapack, found parameters passed dsyev need double precision . tried change double precision (including changing hard coded numbers double precision counterparts, i.e. 0.0 -> 0.0d0) when try compile, following error of functions , subroutines i've written: error: return type mismatch of function <function> @ (1) (real(4)/real(8)) i'm not sure coming from, in program has been changed double precision. for example, i've declared following: double precision :: alpha(3),d(3),zeta1,zeta2 double precision :: a1(3),a2(3),d1(3),d2(3) double precision :: pi pi = 3.14159265359d0 alpha = (/0.109818d0, 0.405771d0, 2.22766d0/) d = (/0.444635d0, 0.535328d0, 0.154329d0 /) 10 i=1,3 ...
Read more

queue - mq_receive: message too long -

-
i implementing communication between 2 processes using queue. problem when call function mq_receive, error: message long. i have done following: struct mq_attr attr; long size = attr.mq_msgsize; .... // initializing queue "/gateway" int rc = mq_receive(gateway, buffer, size, &prio); if print size value, size=1, while when print same size program (got same mechanism), not long integer ( -1217186280 )... how can solve error?....so while size = 1, believe it's right "message long" why 1? p.s. have tried put : int rc = mq_receive(gateway, buffer, sizeof(buffer), &prio); but no result. it seems need read docs more carefully. when call mq_receive should pass size of destination buffer. this size must greater mq_msgsize attribute of queue . in addition, seems have error in queue attributes initialisation makes proper mq_receive call impossible. here standard message queue session: fill mq_attr struct ( doc ): struct mq_a...
Read more