X509ClientCertificateAuthentication.CertificateValidationMode Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Gets or sets the certificate validation mode.
public:
property System::ServiceModel::Security::X509CertificateValidationMode CertificateValidationMode { System::ServiceModel::Security::X509CertificateValidationMode get(); void set(System::ServiceModel::Security::X509CertificateValidationMode value); };
public System.ServiceModel.Security.X509CertificateValidationMode CertificateValidationMode { get; set; }
member this.CertificateValidationMode : System.ServiceModel.Security.X509CertificateValidationMode with get, set
Public Property CertificateValidationMode As X509CertificateValidationMode
Property Value
One of the X509CertificateValidationMode values.
Examples
The following example uses the CertificateValidationMode to print to the screen.
// Create a service host.
Uri httpUri = new Uri("http://localhost/Calculator");
ServiceHost sh = new ServiceHost(typeof(Calculator), httpUri);
// Create a binding that uses a certificate.
WSHttpBinding b = new WSHttpBinding(SecurityMode.Message);
b.Security.Message.ClientCredentialType =
MessageCredentialType.Certificate;
// Get a reference to the authentication object.
X509ClientCertificateAuthentication myAuthProperties =
sh.Credentials.ClientCertificate.Authentication;
switch (myAuthProperties.CertificateValidationMode)
{
case X509CertificateValidationMode.ChainTrust:
Console.WriteLine("ChainTrust");
break;
case X509CertificateValidationMode.Custom:
Console.WriteLine("Custom");
break;
case X509CertificateValidationMode.None:
Console.WriteLine("ChainTrust");
break;
case X509CertificateValidationMode.PeerOrChainTrust:
Console.WriteLine("PeerOrChainTrust");
break;
case X509CertificateValidationMode.PeerTrust:
Console.WriteLine("PeerTrust");
break;
default:
Console.WriteLine("Default");
break;
}
' Create a service host.
Dim httpUri As New Uri("http://localhost/Calculator")
Dim sh As New ServiceHost(GetType(Calculator), httpUri)
' Create a binding that uses a certificate.
Dim b As New WSHttpBinding(SecurityMode.Message)
b.Security.Message.ClientCredentialType = _
MessageCredentialType.Certificate
' Get a reference to the authentication object.
Dim myAuthProperties As X509ClientCertificateAuthentication = _
sh.Credentials.ClientCertificate.Authentication()
Select Case myAuthProperties.CertificateValidationMode
Case X509CertificateValidationMode.ChainTrust
Console.WriteLine("ChainTrust")
Case X509CertificateValidationMode.Custom
Console.WriteLine("Custom")
Case X509CertificateValidationMode.None
Console.WriteLine("ChainTrust")
Case X509CertificateValidationMode.PeerOrChainTrust
Console.WriteLine("PeerOrChainTrust")
Case X509CertificateValidationMode.PeerTrust
Console.WriteLine("PeerTrust")
Case Else
Console.WriteLine("Default")
End Select
The property can also be set in a configuration file.
<serviceCredentials>
<clientCertificate>
<authentication certificateValidationMode='ChainTrust' />
</clientCertificate>
</serviceCredentials>
Remarks
Allowed values of X509CertificateValidationMode are: