X509ClientCertificateAuthentication Class

Definition

Namespace:

System.ServiceModel.Security

Assembly:

System.ServiceModel.dll

Specifies authentication properties for validating the client certificate.

public ref class X509ClientCertificateAuthentication

public class X509ClientCertificateAuthentication

type X509ClientCertificateAuthentication = class

Public Class X509ClientCertificateAuthentication

Inheritance

Object

X509ClientCertificateAuthentication

Examples

The following code shows how to set this property.

// Create a service host.
Uri httpUri = new Uri("http://localhost/Calculator");
ServiceHost sh = new ServiceHost(typeof(Calculator), httpUri);

// Get a reference to the authentication object.
X509ClientCertificateAuthentication myAuthProperties =
    sh.Credentials.ClientCertificate.Authentication;

// Configure peer trust.
myAuthProperties.CertificateValidationMode =
    X509CertificateValidationMode.PeerTrust;
// Configure chain trust.
myAuthProperties.CertificateValidationMode =
    X509CertificateValidationMode.ChainTrust;
// Configure custom certificate validation.
myAuthProperties.CertificateValidationMode =
    X509CertificateValidationMode.Custom;

// Specify a custom certificate validator (not shown here) that inherits
// from the X509CertificateValidator class.
// creds.ClientCertificate.Authentication.CustomCertificateValidator =
//    new MyCertificateValidator();

' Create a service host.
Dim httpUri As New Uri("http://localhost/Calculator")
Dim sh As New ServiceHost(GetType(Calculator), httpUri)

' Get a reference to the authentication object.
Dim myAuthProperties As X509ClientCertificateAuthentication = _
sh.Credentials.ClientCertificate.Authentication

' Configure peer trust.
myAuthProperties.CertificateValidationMode = X509CertificateValidationMode.PeerTrust
' Configure chain trust.
myAuthProperties.CertificateValidationMode = X509CertificateValidationMode.ChainTrust
' Configure custom certificate validation.
myAuthProperties.CertificateValidationMode = X509CertificateValidationMode.Custom
' Specify a custom certificate validator (not shown here) that inherits 
' from the X509CertificateValidator class. 
' creds.ClientCertificate.Authentication.CustomCertificateValidator = _
'    new MyCertificateValidator()

The property can also be set in a configuration file.

<serviceCredentials>  
  <clientCertificate>  
     <authentication certificateValidationMode='ChainTrust' />  
  </clientCertificate>  
</serviceCredentials>  

Remarks

If the CertificateValidationMode is set to Custom, then you must create a custom certificate validator that inherits from the X509CertificateValidator class. For more information, see How to: Create a Service that Employs a Custom Certificate Validator.

Properties

CertificateValidationMode	Gets or sets the certificate validation mode.
CustomCertificateValidator	Gets or sets a custom client certificate validator.
IncludeWindowsGroups	Gets or sets a value that indicates whether Windows groups are included in the authorization context.
MapClientCertificateToWindowsAccount	Gets or sets a value that indicates whether the certificate is mapped to Windows accounts.
RevocationMode	Gets or sets the certificate revocation mode for ChainTrust and PeerOrChainTrust X.509 certificate validation.
TrustedStoreLocation	Gets or sets the trusted store location under which context the client certificate chain is validated.

Methods

Equals(Object)	Determines whether the specified object is equal to the current object. (Inherited from Object)
GetHashCode()	Serves as the default hash function. (Inherited from Object)
GetType()	Gets the Type of the current instance. (Inherited from Object)
MemberwiseClone()	Creates a shallow copy of the current Object. (Inherited from Object)
ToString()	Returns a string that represents the current object. (Inherited from Object)

See also

• X509CertificateValidator
• How To: Create a Service Employing a Custom Certificate Validator
• Working with Certificates