WCF basicHttpBinding之Transport Security Mode, clientCredentialType="None"

素颜马尾好姑娘i 2021-11-22 10:48 249阅读 0赞

原创地址：[http://www.cnblogs.com/jfzhu/p/4071342.html][http_www.cnblogs.com_jfzhu_p_4071342.html]

转载请注明出处

前面文章介绍了[《WCF basicHttpBinding之Message Security Mode》][WCF basicHttpBinding_Message Security Mode]如何basicHttpBinding的Message Security Mode，并且clientCredentialType用的是certificate。

本文演示basicHttpbinding使用Transport Security Mode，并且clientCredentialType="None"。

## （一）WCF 服务代码与配置文件 ##

IDemoService.cs

using System.ServiceModel;
    
    namespace WCFDemo 
    {    
        [ServiceContract(Name = "IDemoService")] 
        public interface IDemoService 
        { 
            [OperationContract] 
            [FaultContract(typeof(DivideByZeroFault))] 
            int Divide(int numerator, int denominator); 
        } 
    }

DemoService.cs

using System; 
    using System.ServiceModel; 
    using System.ServiceModel.Activation;
    
    namespace WCFDemo 
    { 
        [AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Allowed)] 
        public class DemoService : IDemoService 
        { 
            public int Divide(int numerator, int denominator) 
            { 
                try 
                { 
                    return numerator / denominator; 
                } 
                catch (DivideByZeroException ex) 
                { 
                    DivideByZeroFault fault = new DivideByZeroFault(); 
                    fault.Error = ex.Message; 
                    fault.Detail = "Denominator cannot be ZERO!"; 
                    throw new FaultException<DivideByZeroFault>(fault); 
                }           
            } 
        } 
    }

完整的代码也可以参见[《WCF服务创建与抛出强类型SOAP Fault》][WCF_SOAP Fault]。

server web.config

<?xml version="1.0"?> 
    <configuration> 
        <system.web> 
          <compilation debug="true" targetFramework="4.0" /> 
        </system.web> 
        <system.serviceModel> 
          <bindings> 
            <basicHttpBinding> 
              <binding name="basicBinding"> 
                <security mode="Transport"> 
                  <transport clientCredentialType="None" /> 
                </security> 
              </binding> 
            </basicHttpBinding> 
          </bindings> 
          <services> 
            <service name="WCFDemo.DemoService" behaviorConfiguration="CustomBehavior"> 
              <endpoint address="DemoService" binding="basicHttpBinding" contract="WCFDemo.IDemoService" bindingConfiguration="basicBinding" />          
              <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"></endpoint> 
            </service> 
          </services> 
            <behaviors> 
                <serviceBehaviors> 
                    <behavior name="CustomBehavior"> 
                        <serviceMetadata httpsGetEnabled="true" /> 
                        <serviceDebug includeExceptionDetailInFaults="false" />                    
                    </behavior> 
                </serviceBehaviors> 
            </behaviors> 
            <serviceHostingEnvironment multipleSiteBindingsEnabled="true" /> 
        </system.serviceModel> 
    </configuration>

## （二）为WCF Service application添加一个https binding。 ##

具体作法参见[《Step by Step 配置使用HTTPS的ASP.NET Web应用》][Step by Step _HTTPS_ASP.NET Web]。

[![image][]][image 1]

配置完https binding之后，双击SSL Settings

[![image][image 2]][image_image 2]

勾选Require SSL，点击Apply。

[![image][image 3]][image_image 3]

Http的Binding还是不可缺少，否则会出现下面的错误

[![image][image 4]][image_image 4]

[![image][image 5]][image_image 5]

## （三）在客户端安装SSL根证书 ##

由于https证书使用的是

[![image][image 6]][image_image 6]

所以我们使用的WCF Service URL为 https://win-ounm08eqe64.henry.huang/DemoService.svc

在客户端，为C:\\Windows\\System32\\Drivers\\etc\\host 添加一条记录

[![image][image 7]][image_image 7]

然后安装根证书

双击根证书文件，弹出证书属性的对话框，此时该根证书并不受信任，我们需要将其加入“受信任的根证书颁发机构”，点击安装证书

[![image][image 8]][image_image 8]

[![image][image 9]][image_image 9]

[![image][image 10]][image_image 10]

[![image][image 11]][image_image 11]

[![image][image 12]][image_image 12]

[![image][image 13]][image_image 13]

[![image][image 14]][image_image 14]

[![image][image 15]][image_image 15]

## （四）客户端代码与配置文件 ##

在客户端Visual Studio添加Service Reference

[![image][image 16]][image_image 16]

private void buttonCalculate_Click(object sender, EventArgs e) 
    { 
        try 
        { 
            textBoxResult.Text = demoServiceClient.Divide(Convert.ToInt32(textBoxNumerator.Text), Convert.ToInt32(textBoxDenominator.Text)).ToString(); 
        } 
        catch (FaultException<DemoServiceReference.DivideByZeroFault> fault) 
        { 
            MessageBox.Show(fault.Detail.Error + " - " + fault.Detail.Detail); 
        } 
    }

client app.config

<?xml version="1.0" encoding="utf-8" ?> 
    <configuration> 
        <system.serviceModel> 
            <bindings> 
                <basicHttpBinding> 
                    <binding name="BasicHttpBinding_IDemoService"> 
                        <security mode="Transport" /> 
                    </binding> 
                </basicHttpBinding> 
            </bindings> 
            <client> 
                <endpoint address="https://win-ounm08eqe64.henry.huang/DemoService.svc/DemoService" 
                    binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_IDemoService" 
                    contract="DemoServiceReference.IDemoService" name="BasicHttpBinding_IDemoService" /> 
            </client> 
        </system.serviceModel> 
    </configuration>

## （五）运行代码，监听Message ##

[![image][image 17]][image_image 17]

使用Fiddler，发现消息全部加密

[![image][image 18]][image_image 18]

[![image][image 19]][image_image 19]

但是如果用Microsoft Service Trace Viewer查看Message Log（参见[《使用WCF的Trace与Message Log功能 》][WCF_Trace_Message Log_]），可以看到解密后的信息，因为它不是在wire上监听，而Fiddler是在wire上进行监听。

Request:

[![image][image 20]][image_image 20]

Response:

[![image][image 21]][image_image 21]

## （六）总结 ##

Transport Security Mode是传输协议级的加密，而Message Security Mode是对消息级别的加密。每种协议都有自己对应的传输协议级的加密方式，比如HTTP的加密方式就为SSL。

转载于:https://www.cnblogs.com/jfzhu/p/4071342.html

[http_www.cnblogs.com_jfzhu_p_4071342.html]: http://www.cnblogs.com/jfzhu/p/4071342.html
[WCF basicHttpBinding_Message Security Mode]: http://www.cnblogs.com/jfzhu/p/4067873.html
[WCF_SOAP Fault]: http://www.cnblogs.com/jfzhu/p/4060666.html
[Step by Step _HTTPS_ASP.NET Web]: http://www.cnblogs.com/jfzhu/p/4064654.html
[image]: /images/20211122/93789e509c0d4a96a52447ffa8322bbb.png
[image 1]: https://images0.cnblogs.com/blog/442200/201411/031530314704928.png
[image 2]: https://images0.cnblogs.com/blog/442200/201411/031530355498981.png
[image_image 2]: /images/20211122/9402b488ad6a4338adcf162725712163.png
[image 3]: https://images0.cnblogs.com/blog/442200/201411/031530372362965.png
[image_image 3]: /images/20211122/21154c7441f74e05af5834cc98f9f1a7.png
[image 4]: https://images0.cnblogs.com/blog/442200/201411/031530393302593.png
[image_image 4]: /images/20211122/e5349e5abc584a298e6eb7ff55cee9ae.png
[image 5]: https://images0.cnblogs.com/blog/442200/201411/031530406589619.png
[image_image 5]: /images/20211122/2e0a968bfda24523b2ee3daaa1df9b73.png
[image 6]: https://images0.cnblogs.com/blog/442200/201411/031530413929463.png
[image_image 6]: /images/20211122/5ff82e9673a6411bab5dd57193374304.png
[image 7]: https://images0.cnblogs.com/blog/442200/201411/031530423146548.png
[image_image 7]: /images/20211122/3555cb8ce5934c9bbe16b7ccdb68fd27.png
[image 8]: https://images0.cnblogs.com/blog/442200/201411/031530432522161.png
[image_image 8]: /images/20211122/27371cf222284f26a2e704d02d635f6a.png
[image 9]: https://images0.cnblogs.com/blog/442200/201411/031530443456961.png
[image_image 9]: /images/20211122/be5117bc8b0649708d81d1aad9ff2a52.png
[image 10]: https://images0.cnblogs.com/blog/442200/201411/031530454392761.png
[image_image 10]: /images/20211122/89c02d968d06496e9961490fc9ca93a1.png
[image 11]: https://images0.cnblogs.com/blog/442200/201411/031530459087216.png
[image_image 11]: /images/20211122/fa3ad8f3bce149b68bdee9dcd855ab9f.png
[image 12]: https://images0.cnblogs.com/blog/442200/201411/031530468457530.png
[image_image 12]: /images/20211122/d418e71271c54386bd85ab1e317e23e4.png
[image 13]: https://images0.cnblogs.com/blog/442200/201411/031530474703173.png
[image_image 13]: /images/20211122/f8637dc938d74650890a438cbd48778f.png
[image 14]: https://images0.cnblogs.com/blog/442200/201411/031530486425715.png
[image_image 14]: /images/20211122/5c7b574d2a814ea1b87a32ff28aa30d6.png
[image 15]: https://images0.cnblogs.com/blog/442200/201411/031530504864184.png
[image_image 15]: /images/20211122/8fef21009d2a4e1da98785591a038b8e.png
[image 16]: https://images0.cnblogs.com/blog/442200/201411/031530521588639.png
[image_image 16]: /images/20211122/909fa02dfb5c4146b206ede51c5605db.png
[image 17]: https://images0.cnblogs.com/blog/442200/201411/031530530172212.png
[image_image 17]: /images/20211122/2d3e4d0618464d27acea81360aff32c1.png
[image 18]: https://images0.cnblogs.com/blog/442200/201411/031530547055195.png
[image_image 18]: /images/20211122/6391e292c1a34294b68465f5e9ff6aee.png
[image 19]: https://images0.cnblogs.com/blog/442200/201411/031530570803037.png
[image_image 19]: /images/20211122/b86b0cc679bb419f928750d4aa530dc9.png
[WCF_Trace_Message Log_]: http://www.cnblogs.com/jfzhu/p/4030008.html
[image 20]: https://images0.cnblogs.com/blog/442200/201411/031530588924450.png
[image_image 20]: /images/20211122/8f8ccb53afe64775bdbbf977b5cdc341.png
[image 21]: https://images0.cnblogs.com/blog/442200/201411/031531001899720.png
[image_image 21]: /images/20211122/9e0beb130c6346eb9f08d52dd6cbedc5.png