Hi Dhromas,
It seems that there is no fault in the document. here is my example,
Server(.net framework4.7) console application.
static void Main(string[] args)
{
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
Uri uri = new Uri("http://localhost:4396");
WSHttpBinding binding = new WSHttpBinding();
binding.Security.Mode = SecurityMode.Message;
binding.Security.Message.ClientCredentialType = MessageCredentialType.None;
using (ServiceHost sh=new ServiceHost(typeof(TestService),uri))
{
sh.AddServiceEndpoint(typeof(ITestService), binding, "");
ServiceMetadataBehavior smb;
smb = sh.Description.Behaviors.Find<ServiceMetadataBehavior>();
if (smb==null)
{
smb = new ServiceMetadataBehavior()
{
HttpGetEnabled = true
};
sh.Description.Behaviors.Add(smb);
}
Binding mexbinding = MetadataExchangeBindings.CreateMexHttpBinding();
sh.AddServiceEndpoint(typeof(IMetadataExchange), mexbinding, "mex");
//provide the certificate to encrypt the message.
X509Certificate2 cert = new X509Certificate2("1.pfx", "123456");
sh.Credentials.ServiceCertificate.Certificate = cert;
sh.Opened += delegate
{
Console.WriteLine("service is ready");
};
sh.Closed += delegate
{
Console.WriteLine("service is closed");
};
sh.Open();
Console.ReadLine();
sh.Close();
}
}
}
[ServiceContract]
public interface ITestService
{
[OperationContract]
string GetResult();
}
[ServiceBehavior]
public class TestService : ITestService
{
public string GetResult()
{
return $"Hello, busy World. {DateTime.Now.ToShortTimeString()}";
}
}
Client (invocation by adding service reference, .net framework4.7)
static void Main(string[] args)
{
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
ServiceReference1.TestServiceClient client = new ServiceReference1.TestServiceClient();
try
{
var result = client.GetResult();
Console.WriteLine(result);
}
catch (Exception)
{
throw;
}
}
Before I change the following code (both server side and client side), this project works well.
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;
When I changed to the TLS version to tls12, it throws the client authentication errors.
Only when I add the following code to the configuration file, it works.
<runtime>
<AppContextSwitchOverrides value="Switch.System.ServiceModel.DisableUsingServicePointManagerSecurityProtocols=false;Switch.System.Net.DontEnableSchUseStrongCrypto=false" />
</runtime>
Wish the above example is useful to you.
Feel free to let me know if there is anything I can help with.
Best Regards
Abraham
