[英]WCF fails to deserialize correct(?) response message security headers (Security header is empty)
我正在使用WCF客户端与OC4J Web服务进行通信。 客户端配置如下:
<basicHttpBinding>
<binding name="MyBinding">
<security mode="TransportWithMessageCredential">
<transport clientCredentialType="None" proxyCredentialType="None" realm=""/>
<message clientCredentialType="UserName" algorithmSuite="Default"/>
</security>
</binding>
我的客户代码如下:
ServicePointManager.CertificatePolicy = new AcceptAllCertificatePolicy();
string username = ConfigurationManager.AppSettings["user"];
string password = ConfigurationManager.AppSettings["pass"];
// client instance maken
WebserviceClient client = new WebserviceClient();
client.Endpoint.Binding = new BasicHttpBinding("MyBinding");
// credentials toevoegen
client.ClientCredentials.UserName.UserName = username;
client.ClientCredentials.UserName.Password = password;
//uitvoeren request
var response = client.Ping();
我已经更改了CertificatePolicy以接受所有证书,因为我需要在客户端和服务器之间插入Charles(ssl代理),以拦截通过网络发送的实际Xml。
我的要求如下所示:
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<s:Header>
<o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<u:Timestamp u:Id="_0">
<u:Created>2010-04-01T09:47:01.161Z</u:Created>
<u:Expires>2010-04-01T09:52:01.161Z</u:Expires>
</u:Timestamp>
<o:UsernameToken u:Id="uuid-9b39760f-d504-4e53-908d-6125a1827aea-21">
<o:Username>user</o:Username>
<o:Password o:Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username- token-profile-1.0#PasswordText">pass</o:Password>
</o:UsernameToken>
</o:Security>
</s:Header>
<s:Body>
<getPrdStatus xmlns="http://mynamespace.org/wsdl">
<request xmlns="" xmlns:a="http://mynamespace.org/wsdl" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<a:IsgrStsRequestTypeUser>
<a:prdCode>LEPTO</a:prdCode>
<a:sequenceNumber i:nil="true" />
<a:productionType i:nil="true" />
<a:statusDate>2010-04-01T11:47:01.1617641+02:00</a:statusDate>
<a:ubn>123456</a:ubn>
<a:animalSpeciesCode>RU</a:animalSpeciesCode>
</a:IsgrStsRequestTypeUser>
</request>
</getPrdStatus>
</s:Body>
</s:Envelope>
作为回报,我收到以下答复:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="http://mynamespace.org/wsdl">
<env:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" env:mustUnderstand="1" />
</env:Header>
<env:Body>
<ns0:getPrdStatusResponse>
<result>
<ns0:IsgrStsResponseTypeUser>
<ns0:prdCode>LEPTO</ns0:prdCode>
<ns0:color>green</ns0:color>
<ns0:stsCode>LEP1</ns0:stsCode>
<ns0:sequenceNumber xsi:nil="1" />
<ns0:productionType xsi:nil="1" />
<ns0:IAndRCode>00</ns0:IAndRCode>
<ns0:statusDate>2010-04-01T00:00:00.000+02:00</ns0:statusDate>
<ns0:description>Gecertificeerd vrij</ns0:description>
<ns0:ubn>123456</ns0:ubn>
<ns0:animalSpeciesCode>RU</ns0:animalSpeciesCode>
<ns0:name>gecertificeerd vrij</ns0:name>
<ns0:ranking>17</ns0:ranking>
</ns0:IsgrStsResponseTypeUser>
</result>
</ns0:getPrdStatusResponse>
</env:Body>
</env:Envelope>
WCF为什么不能反序列化此响应头? 我收到“安全标题为空”异常:
Server stack trace:
at System.ServiceModel.Security.ReceiveSecurityHeader.Process(TimeSpan timeout)
at System.ServiceModel.Security.TransportSecurityProtocol.VerifyIncomingMessageCore(Message& message, TimeSpan timeout)
at System.ServiceModel.Security.TransportSecurityProtocol.VerifyIncomingMessage(Message& message, TimeSpan timeout)
at System.ServiceModel.Security.SecurityProtocol.VerifyIncomingMessage(Message& message, TimeSpan timeout, SecurityProtocolCorrelationState[] correlationStates)
at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.ProcessReply(Message reply, SecurityProtocolCorrelationState correlationState, TimeSpan timeout)
at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
谁知道这里发生了什么? 我已经尝试过Rick Strahl的建议,并从请求标头中删除了时间戳。 任何帮助,不胜感激!
以下kb文章似乎解决了我的问题: http : //support.microsoft.com/kb/971493/
尚未能够下载此修补程序,因为似乎没有下载链接。
不知道是否也涵盖了您的特定问题,但是此线程中讨论了很多选项 。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.