无法使用Asp.net Core WCF连接的服务添加多个客户端证书

Question

Trying to call a soap web service that requires two x509 certificates.

I was able to do this with .net framework project and proxy generated with wsdl.exe tool.

Now generating with new .net core proxy generators, we can only set one certificate with service and one for client

//wsdl.exe generated code .. svc.ClientCertificates.Add(X509Certificate.CreateFromCertFile(settings.TheirCertPath)); svc.ClientCertificates.Add(X509Certificate.CreateFromCertFile(settings.OurCertPath));

//dotnet svc utl.exe generated code

var factory = new ChannelFactory(binding, endpoint);

        factory.Credentials.ClientCertificate.Certificate = clientCertificate;
                  factory.Credentials.ServiceCertificate.DefaultCertificate = serverCertificate;

Any ideas on why microsoft would remove the ability to set multiple client certs?

Answer 1

https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/message-security-with-mutual-certificates

Your server-side mainly based on the message level security with mutual certificate. Currently it is not supported by Asp.net Core. Therefore, we could not generate the client proxy class by using Microsoft WCF Web Service Reference Provider. Please refer to the official repository issue.
https://github.com/dotnet/wcf/issues/1354
https://github.com/dotnet/wcf/issues/2766
Feel free to let me know if there is anything I can help with.