WCF客户端证书身份验证，服务“ SslRequireCert”的SSL设置与IIS“ Ssl，SslNegotiateCert”的SSL设置不匹配

Question

I have a website that is going to be called from some clients which will be authenticating with client certificates and others which will not be, because of this i have to have iis settings for client certificate set to allow. This works fine on a windows 7 professional however when i try to run this on a virtual server setup with windows 7 i get the following error

The SSL settings for the service 'SslRequireCert' does not match those of the IIS 'Ssl, SslNegotiateCert'

All iis settings seem to be the same between the two environments

Jeremy

Answer 1

This can be caused by the IIS settings not matching the WCF configuration.

    <binding name="TransportWithCertificate">
      <security mode="Transport">
        <transport clientCredentialType="Certificate" />
      </security>
    </binding>

The error message is very explicit. It is saying 'SSLRequireCert' or clientCredentialType="Certificate" does not match IIS settings of 'Ssl, SslNegotiateCert' or Client certificates: Accept. To fix this in IIS you need ClientCertificates: Require.

In my case Server 2008 R2/IIS 7.5 behaved differently to Windows 7/IIS 7.5 & Windows 8.1/IIS 8.5. In both of the desktop OS version I could run the application with Require SSL/ Client certificate: Accept.

But on Server 2008 R2/IIS 7.5 the page would not load with the error SSL settings for the service 'SslRequireCert' does not match those of the IIS 'Ssl, SslNegotiateCert' Changing to Client certificate: Require resolved the issue.