如何:创建使用 HTTPS 的自定义可靠会话绑定
本主题演示如何对可靠会话使用安全套接字层 (SSL) 传输安全。若要通过 HTTPS 使用可靠会话,必须创建使用可靠会话和 HTTPS 传输协议的自定义绑定。可使用代码以强制方式或在配置文件中以声明方式来启用可靠会话。此过程使用客户端和服务配置文件来启用可靠会话和 <httpsTransport> 元素。
此过程的关键部分是 endpoint 配置元素包含一个 bindingConfiguration 属性,此属性引用名为“reliableSessionOverHttps”的自定义绑定配置。然后,<binding> 配置元素可以引用此名称来指定,通过包括 reliableSession 和 httpsTransport 元素来使用可靠会话和 HTTPS 传输协议。
有关此示例的源副本,请参见基于 HTTPS 的自定义绑定可靠会话。
使用 CustomBinding 配置服务以将可靠会话与 HTTPS 一起使用
为该类型的服务定义服务协定。
[ServiceContract] public interface ICalculator { [OperationContract] double Add(double n1, double n2); [OperationContract] double Subtract(double n1, double n2); [OperationContract] double Multiply(double n1, double n2); [OperationContract] double Divide(double n1, double n2); }
在服务类中实现该服务协定。请注意,在服务的实现内部,未指定地址或绑定信息。而且,不必编写代码也可从配置文件中检索该信息。
public class CalculatorService : ICalculator { public double Add(double n1, double n2) { return n1 + n2; } public double Subtract(double n1, double n2) { return n1 - n2; } public double Multiply(double n1, double n2) { return n1 * n2; } public double Divide(double n1, double n2) { return n1 / n2; } }
创建 Web.config 文件,并使用名为“reliableSessionOverHttps”的自定义绑定(使用可靠会话和 HTTPS 传输协议)为 CalculatorService 配置一个终结点。
创建包含以下代码行的 Service.svc 文件:
<%@ServiceHost language=c# Service="CalculatorService" %>
将 Service.svc 文件放到 Internet 信息服务 (IIS) 虚拟目录中。
使用 CustomBinding 配置客户端以将可靠会话与 HTTPS 一起使用
从命令行使用 ServiceModel 元数据实用工具 (Svcutil.exe) 以从服务元数据生成代码。
Svcutil.exe <service's Metadata Exchange (MEX) address or HTTP GET address>
生成的客户端包含 ICalculator 接口,该接口定义了客户端实现必须满足的服务协定。
//Generated interface defining the ICalculator contract [System.ServiceModel.ServiceContractAttribute( Namespace="http://Microsoft.ServiceModel.Samples", ConfigurationName="Microsoft.ServiceModel.Samples.ICalculator")] public interface ICalculator { [System.ServiceModel.OperationContractAttribute( Action="http://Microsoft.ServiceModel.Samples/ICalculator/Add", ReplyAction="http://Microsoft.ServiceModel.Samples/ICalculator/AddResponse")] double Add(double n1, double n2); [System.ServiceModel.OperationContractAttribute( Action="http://Microsoft.ServiceModel.Samples/ICalculator/Subtract", ReplyAction="http://Microsoft.ServiceModel.Samples/ICalculator/SubtractResponse")] double Subtract(double n1, double n2); [System.ServiceModel.OperationContractAttribute( Action="http://Microsoft.ServiceModel.Samples/ICalculator/Multiply", ReplyAction="http://Microsoft.ServiceModel.Samples/ICalculator/MultiplyResponse")] double Multiply(double n1, double n2); [System.ServiceModel.OperationContractAttribute( Action="http://Microsoft.ServiceModel.Samples/ICalculator/Divide", ReplyAction="http://Microsoft.ServiceModel.Samples/ICalculator/DivideResponse")] double Divide(double n1, double n2); }
生成的客户端应用程序还包含 ClientCalculator 的实现。请注意,在服务的实现内部,未指定地址和绑定信息。而且,不必编写代码也可从配置文件中检索该信息。
// Implementation of the CalculatorClient public partial class CalculatorClient : System.ServiceModel.ClientBase<Microsoft.ServiceModel.Samples.ICalculator>, Microsoft.ServiceModel.Samples.ICalculator { public CalculatorClient() { } public CalculatorClient(string endpointConfigurationName) : base(endpointConfigurationName) { } public CalculatorClient(string endpointConfigurationName, string remoteAddress) : base(endpointConfigurationName, remoteAddress) { } public CalculatorClient(string endpointConfigurationName, System.ServiceModel.EndpointAddress remoteAddress) : base(endpointConfigurationName, remoteAddress) { } public CalculatorClient(System.ServiceModel.Channels.Binding binding, System.ServiceModel.EndpointAddress remoteAddress) : base(binding, remoteAddress) { } public double Add(double n1, double n2) { return base.Channel.Add(n1, n2); } public double Subtract(double n1, double n2) { return base.Channel.Subtract(n1, n2); } public double Multiply(double n1, double n2) { return base.Channel.Multiply(n1, n2); } public double Divide(double n1, double n2) { return base.Channel.Divide(n1, n2); } }
配置一个名为“reliableSessionOverHttps”的自定义绑定以使用 HTTPS 传输和可靠的会话。
<?xml version="1.0" encoding="utf-8" ?> <configuration> <system.serviceModel> <client> <!-- this endpoint has an https: address --> <endpoint name="" address="https://localhost/servicemodelsamples/service.svc" binding="customBinding" bindingConfiguration="reliableSessionOverHttps" contract="Microsoft.ServiceModel.Samples.ICalculator" /> </client> <bindings> <customBinding> <binding name="reliableSessionOverHttps"> <reliableSession /> <httpsTransport /> </binding> </customBinding> </bindings> </system.serviceModel> </configuration>
在应用程序中创建 ClientCalculator 的实例,然后调用服务操作。
//Client implementation code. class Client { static void Main() { // Create a client with given client endpoint configuration CalculatorClient client = new CalculatorClient(); // Call the Add service operation. double value1 = 100.00D; double value2 = 15.99D; double result = client.Add(value1, value2); Console.WriteLine("Add({0},{1}) = {2}", value1, value2, result); // Call the Subtract service operation. value1 = 145.00D; value2 = 76.54D; result = client.Subtract(value1, value2); Console.WriteLine("Subtract({0},{1}) = {2}", value1, value2, result); // Call the Multiply service operation. value1 = 9.00D; value2 = 81.25D; result = client.Multiply(value1, value2); Console.WriteLine("Multiply({0},{1}) = {2}", value1, value2, result); // Call the Divide service operation. value1 = 22.00D; value2 = 7.00D; result = client.Divide(value1, value2); Console.WriteLine("Divide({0},{1}) = {2}", value1, value2, result); //Closing the client gracefully closes the connection and cleans up resources client.Close(); Console.WriteLine(); Console.WriteLine("Press <ENTER> to terminate client."); Console.ReadLine(); } }
编译并运行客户端。
示例
安全性
因为此示例中使用的证书是用 Makecert.exe 创建的测试证书,所以当您尝试从浏览器中访问 HTTPS 地址(例如 https://localhost/servicemodelsamples/service.svc)时,将出现安全警报。