Signing a custom soap header (WS-Security) with WCF

[Mike Logan]

Title: Help: Signing a custom soap header (WS-Security) with WCF.

I need help signing a custom soap header that is required by my web service
proxy. The custom soap header needs to be added to every outbound call from
the client. The service is not WCF. The real services behind the proxy are
just plain old ASMX services. The proxy is what requires the signed custom
soap header for authentication and authorization.

Steven Cheng,

I need to find out whether or not I can open it up to you. Once I get
approval I will need an email address to send the link to. I cannot post it
here. Again, thanks for your help Steven. I have been wrestling with this
for quite awhile.

Thanks,

Mike Logan


This thread is based off this thread
http://www.microsoft.com/communitie...&p=1&tid=426857a0-b405-493c-be11-fd956d5ed259

Some other posts on the WCF forums that were started by me
http://social.msdn.microsoft.com/Forums/en-US/wcf/thread/52674713-3dd9-44e8-9633-7d2d7fb67667

http://social.msdn.microsoft.com/Forums/en-US/wcf/thread/a54d6b12-343e-4f90-9894-d16d68bed707

http://social.msdn.microsoft.com/Forums/en-US/wcf/thread/d518fc3b-3828-4da1-8eda-ac63269bd1d3

 

[Steven Cheng]

Hi Mike,

No problem. You can reach me at the following address

"stcheng" + @ + "microsoft.com"

Also, since the service is secured, I may also need some test client
certificate, also the public cert (without private key) of your service
certificate.

Regards,

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).


--------------------

 

[Steven Cheng]

Hi Mike,

I've got your email and have also replied you with the exported test
certificate(minus private key). I'll keep you update of the new progress on
this.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).


--------------------

 

[Steven Cheng]

Hi Mike,

As for this issue. I'm afraid so far we'll still suggest you use the
original class library to manually sign the soap header since the expected
Webservice message(with only a signed soap header) is too much different
from the WCF supported WS-* standards. Or if possible, you can still remain
that webservice to be communicated via your original webservice client and
use WCF client for some other webservice endpoints.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead


Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).