发送 soap 请求时无法解析用于验证签名的 KeyInfo

Question

在尝试提出请求时，我不断收到以下错误响应。

错误响应：

Cannot resolve KeyInfo for verifying signature: KeyInfo 'SecurityKeyIdentifier
    (
    IsReadOnly = False,
    Count = 1,
    Clause[0] = X509ThumbprintKeyIdentifierClause(Hash = 0x00EE1960A463F7A891C0C9551DC937BD5D8F5F64)
    )
', available tokens 'SecurityTokenResolver
    (
    TokenCount = 1,
    TokenEntry[0] = (AllowedReferenceStyle=External, Token=System.IdentityModel.Tokens.X509SecurityToken, Parameters=System.ServiceModel.Security.Tokens.X509SecurityTokenParameters:
InclusionMode: AlwaysToRecipient
ReferenceStyle: Internal
RequireDerivedKeys: True
X509ReferenceStyle: Thumbprint)
    )
'.

客户端创建：

Dim client As New xxxClient()
client.Endpoint.Contract.ProtectionLevel = ProtectionLevel.Sign
client.Endpoint.Binding = CreateBinding()
client.Endpoint.Address = CreateEndpointAddress(client.Endpoint)
Dim x509Certificate2Client As X509Certificate2 = CertificateManager.GetCertificateBySerialNumber(ConfigSettingFunctions.CadNetCertificaatSerialNummer(_Company_ID), True)
Dim x509Certificate2Server As X509Certificate2 = CertificateManager.GetCertificateBySerialNumber(ConfigSettingFunctions.CadNetCertificaatSerialNummer(_Company_ID), False)
client.ClientCredentials.ClientCertificate.Certificate = x509Certificate2Client
client.ClientCredentials.ServiceCertificate.DefaultCertificate = x509Certificate2Server
client.ClientCredentials.ServiceCertificate.Authentication.CertificateValidationMode = X509CertificateValidationMode.None

绑定创建：

Private Function CreateBinding() As Binding
    Dim binding = New CustomBinding()
    Dim initiatorSec As SecurityTokenParameters = New X509SecurityTokenParameters(X509KeyIdentifierClauseType.RawDataKeyIdentifier)
    Dim recipientSec As SecurityTokenParameters = New X509SecurityTokenParameters(X509KeyIdentifierClauseType.Thumbprint)
    Dim asym As AsymmetricSecurityBindingElement = New AsymmetricSecurityBindingElement(recipientSec, initiatorSec)
    binding.Elements.Add(asym)
    binding.Elements.Add(New TextMessageEncodingBindingElement(MessageVersion.Soap11, Encoding.UTF8))
    binding.Elements.Add(New HttpsTransportBindingElement())
    Return binding
End Function

端点地址创建：

Private Function CreateEndpointAddress(endpoint As ServiceEndpoint) As EndpointAddress
    Return New EndpointAddress(endpoint.ListenUri, EndpointIdentity.CreateDnsIdentity("xxx"))
End Function

在使用 SoapUI 时，请求有效，所以我确信至少客户端证书是正确的。 这让我相信自定义绑定有问题。

我还尝试使用 MutualCertificateDuplex 绑定的多个版本，但我不断收到相同的错误。 我相当确定我需要使用 Asymetric 安全绑定才能连接到服务，因为服务的示例代码使用了上述绑定配置。