alkampfer on August 30th, 2010

Today I was working a little bit on Dexter, and I’m trying to update the security system, the actual login system is based on a membership provider quite old, but I’d like to update it to be CryptoAgile. First of all here is the class UserDto (the name Dto should be changed because it is [...]

Continue reading about Desiging a authentication layer with cryptoagility.

alkampfer on November 26th, 2009

In last article I explained how to configure WCF to secure a service with https, with no authentication, now I want to show you the configuration needed to enable role and user membership using a standard asp.net provider.
Here is the service definition on the server

<service behaviorConfiguration=”WsHttpWithAuthBehavior”
[...]

Continue reading about Wcf over https, authentication with asp.net membership

alkampfer on November 25th, 2009

In some older posts, I dealt with wcf configuration to manage authentication of a service with the asp.net membership provider.
Now I need to modify configuration, because in another project, all the site is forced over https, and the configuration I used in the other project cannot be used anymore. In older post in fact, I [...]

Continue reading about Wcf over secure transport

In the previous post, I showed how to setup authentication with asp.net membership in wsHttpBinding for a Wcf server, and in that post I showed how to use the utility makecert.exe to generate temporary certificates. In production environment you should generate certificates with a Certification Authority.
If you search in the internet how to generate [...]

Continue reading about Generate a certificate for Wcf service with windows server 2003