沒有安全性的WCF

Question

我有一個WCF服務設置，我可以使用它作爲intendid ...但只能在同一臺機器上使用。我期望在多臺計算機上工作，並且我對安全性不感興趣。然而，當我設置（客戶端）的安全性=無，我得到一個InvalidOperationException異常：

服務證書並沒有提供目標 「http://xxx.xxx.xxx.xxx:8731/Design_Time_Addresses/WcfServiceLibrary/ManagementService/」 。 在 ClientCredentials中指定服務證書。

所以我留下了：

<security mode="Message"> 
    <message clientCredentialType="None" negotiateServiceCredential="false" 
     algorithmSuite="Default" /> 
</security> 

但是這給了我另一個InvalidOperationException異常：

服務證書不 提供目標 'http://xxx.xxx.xxx.xxx:8731/Design_Time_Addresses/WcfServiceLibrary/ManagementService/'。 在 ClientCredentials中指定服務證書。

爲什麼我要在安全關閉的情況下提供證書？

更新：

服務器應用程序配置：

<system.serviceModel> 
    <services> 
     <service name="Server.WcfServiceLibrary.ManagementService" behaviorConfiguration="Server.WcfServiceLibrary.ManagementServiceBehavior"> 
     <host> 
      <baseAddresses> 
      <add baseAddress = "http://localhost:8731/Design_Time_Addresses/WcfServiceLibrary/ManagementService/" /> 
      </baseAddresses> 
     </host> 
     <endpoint address ="" binding="wsDualHttpBinding" contract="Server.WcfServiceLibrary.IManagementService" 
        bindingConfiguration="WSDualHttpBinding_IManagementService"> 
      <identity> 
      <dns value="localhost"/> 
      </identity> 
     </endpoint> 
     <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/> 
     </service> 
    </services> 
     <bindings> 
      <wsDualHttpBinding> 
       <binding name="WSDualHttpBinding_IManagementService" closeTimeout="00:01:00" 
        openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:00:10" 
        bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard" 
        maxBufferPoolSize="524288" maxReceivedMessageSize="65536" 
        messageEncoding="Text" textEncoding="utf-8" useDefaultWebProxy="true"> 
        <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384" 
         maxBytesPerRead="4096" maxNameTableCharCount="16384" /> 
        <reliableSession ordered="true" inactivityTimeout="00:10:00" /> 
        <security mode="None" /> 
       </binding> 
      </wsDualHttpBinding> 
     </bindings> 
    <behaviors> 
     <serviceBehaviors> 
     <behavior name="Server.WcfServiceLibrary.ManagementServiceBehavior"> 
      <serviceMetadata httpGetEnabled="True"/> 
      <serviceDebug includeExceptionDetailInFaults="False" /> 
     </behavior> 
     </serviceBehaviors> 
    </behaviors> 
    </system.serviceModel> 

客戶端應用程序配置：

<system.serviceModel> 
     <bindings> 
      <wsDualHttpBinding> 
       <binding name="WSDualHttpBinding_IManagementService" closeTimeout="00:01:00" 
        openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00" 
        bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard" 
        maxBufferPoolSize="524288" maxReceivedMessageSize="65536" 
        messageEncoding="Text" textEncoding="utf-8" useDefaultWebProxy="true"> 
        <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384" 
         maxBytesPerRead="4096" maxNameTableCharCount="16384" /> 
        <reliableSession ordered="true" inactivityTimeout="00:10:00" /> 
        <security mode="None" /> 
       </binding> 
      </wsDualHttpBinding> 
     </bindings> 
     <client> 
      <endpoint address="http://xxx:8731/Design_Time_Addresses/WcfServiceLibrary/ManagementService/" 
       binding="wsDualHttpBinding" bindingConfiguration="WSDualHttpBinding_IManagementService" 
       contract="ServiceReference.IManagementService"> 
       <!--name="WSDualHttpBinding_IManagementService">--> 
       <identity> 
        <dns value="localhost" /> 
       </identity> 
      </endpoint> 
     </client> 
    </system.serviceModel> 

感謝

Answer 1

給你一些更多的信息去！

什麼是你的服務器端和客戶端配置？ <system.serviceModel>中的任何內容都是有意義的。你使用什麼綁定？

例如：如果您將客戶端安全設置爲無，您必須在服務器端執行相同的操作 - 這些設置需要匹配！

更新：

OK，用的配置，我可以指出一定的東西出來：

<bindings> 
    <wsDualHttpBinding> 
     <binding name="WSDualHttpBinding_IManagementService" ......> 
      <readerQuotas .... /> 
      <reliableSession ordered="true" inactivityTimeout="00:10:00" /> 
      <security mode="Message"> 
       <message clientCredentialType="Windows" 
         negotiateServiceCredential="true" 
         algorithmSuite="Default" /> 
      </security> 
     </binding> 
    </wsDualHttpBinding> 
</bindings> 

問題：

• 你真的需要wsDualHttpBinding？這是一個明智的選擇嗎？

• ，如果你不希望任何安全性，您需要使用：

  <security mode="None" /> 
  

• 你需要同時擁有客戶端和服務器上的此<bindings>部分，你需要引用從綁定配置你的終點：

  <endpoint 
      address ="" 
      binding="wsDualHttpBinding" 
      bindingConfiguration="WSDualHttpBinding_IManagementService" 
      contract="Server.WcfServiceLibrary.ICheckoutService"> 
      <identity> 
      <dns value="localhost"/> 
      </identity> 
  </endpoint>