Changeset 1579 for trunk/sources/HeuristicLab.Hive.Contracts/3.2

Timestamp:

04/16/09 17:44:58 (15 years ago)

Author:

mbecirov

Message:

#528: WCF Service secured - you need to install the certificate in order to run the application properly!

File:

• trunk/sources/HeuristicLab.Hive.Contracts/3.2/WcfSettings.cs (modified) (3 diffs)

trunk/sources/HeuristicLab.Hive.Contracts/3.2/WcfSettings.cs

@@ -1 @@
-using System;
+#define USE_MSG_BINDING
+using System;
 using System.Collections.Generic;
 using System.Linq;
@@ -11 +12 @@
   public static class WcfSettings {
 
+    public const string SERVERCERT = "HIVE-Server";
+    public const int DEFAULTPORT = 9000;
+    
+    /// <summary>
+    /// Gets a pre-defined binding using TCP for secure transport.
+    /// </summary>
+    /// <returns>A binding type of <see cref="NetTcpBinding"/></returns>
     public static Binding GetBinding() {
+#if USE_MSG_BINDING
       NetTcpBinding binding = new NetTcpBinding(SecurityMode.Message);
+#else
+      NetTcpBinding binding = new NetTcpBinding(SecurityMode.TransportWithMessageCredential);
+      binding.Security.Message.ClientCredentialType = MessageCredentialType.Certificate;
+#endif
       return binding;
     }
 
+    /// <summary>
+    /// Defines the used certificate for authentification located in a certification store.
+    /// </summary>
+    /// <param name="svchost">A service for which this certificate is applicable.</param>
+    public static void SetServiceCertificate(ServiceHost svchost) {
+      svchost.Credentials.ServiceCertificate.SetCertificate(
+        StoreLocation.LocalMachine,
+        StoreName.My,
+        X509FindType.FindBySubjectName,
+        SERVERCERT);
+    }
+
+    /// <summary>
+    /// Gets the currently active IP address.
+    /// <remarks>If more than one IP connections is active, the first one will be used.</remarks>
+    /// </summary>
+    /// <returns></returns>
     public static string GetActiveIP() {
       return System.Net.NetworkInformation.IPGlobalProperties.GetIPGlobalProperties().GetActiveTcpConnections()[0].LocalEndPoint.Address.ToString();
     }
 
+    /// <summary>
+    /// Gets the default port used for HIVE services.
+    /// </summary>
+    /// <returns></returns>
     public static int GetDefaultPort() {
-      return 9000;
+      return DEFAULTPORT;
     }
   }
 
-  // WARNUNG: Dieser Code wird nur für Testzertifikate benötigt, wie sie beispielsweise von makecert erstellt werden. 
-  // Sie sollten diesen Code nicht in einer Produktionsumgebung verwenden.
+  /// <summary>
+  /// This class verifies the certificate defined by <see cref="SetServerCertificate"></see> method. Normally,
+  /// the verification process is managed by the underlying operating system.
+  /// </summary>
+  /// <remarks>
+  /// WARNUNG: Dieser Code wird nur für Testzertifikate benötigt, wie sie beispielsweise von makecert erstellt werden.
+  /// Sie sollten diesen Code nicht in einer Produktionsumgebung verwenden.
+  /// </remarks>
   public class PermissiveCertificatePolicy {
     string subjectName;
@@ -44 +84 @@
         return true;
       }
-
       return false;
     }