X509ClientCertificateAuthentication.CertificateValidationMode 属性

定义

命名空间:

System.ServiceModel.Security

程序集:

System.ServiceModel.dll

获取或设置证书验证模式。

public:
 property System::ServiceModel::Security::X509CertificateValidationMode CertificateValidationMode { System::ServiceModel::Security::X509CertificateValidationMode get(); void set(System::ServiceModel::Security::X509CertificateValidationMode value); };

public System.ServiceModel.Security.X509CertificateValidationMode CertificateValidationMode { get; set; }

member this.CertificateValidationMode : System.ServiceModel.Security.X509CertificateValidationMode with get, set

Public Property CertificateValidationMode As X509CertificateValidationMode

属性值

X509CertificateValidationMode

X509CertificateValidationMode 值之一。

示例

以下示例使用 CertificateValidationMode 输出到屏幕。

// Create a service host.
Uri httpUri = new Uri("http://localhost/Calculator");
ServiceHost sh = new ServiceHost(typeof(Calculator), httpUri);

// Create a binding that uses a certificate.
WSHttpBinding b = new WSHttpBinding(SecurityMode.Message);
b.Security.Message.ClientCredentialType =
    MessageCredentialType.Certificate;

// Get a reference to the authentication object.
X509ClientCertificateAuthentication myAuthProperties =
    sh.Credentials.ClientCertificate.Authentication;

switch (myAuthProperties.CertificateValidationMode)
{
    case X509CertificateValidationMode.ChainTrust:
        Console.WriteLine("ChainTrust");
        break;
    case X509CertificateValidationMode.Custom:
        Console.WriteLine("Custom");
        break;
    case X509CertificateValidationMode.None:
        Console.WriteLine("ChainTrust");
        break;
    case X509CertificateValidationMode.PeerOrChainTrust:
        Console.WriteLine("PeerOrChainTrust");
        break;
    case X509CertificateValidationMode.PeerTrust:
        Console.WriteLine("PeerTrust");
        break;
    default:
        Console.WriteLine("Default");
        break;
}

' Create a service host.
Dim httpUri As New Uri("http://localhost/Calculator")
Dim sh As New ServiceHost(GetType(Calculator), httpUri)

' Create a binding that uses a certificate.
Dim b As New WSHttpBinding(SecurityMode.Message)
b.Security.Message.ClientCredentialType = _
MessageCredentialType.Certificate

' Get a reference to the authentication object.
Dim myAuthProperties As X509ClientCertificateAuthentication = _
sh.Credentials.ClientCertificate.Authentication()

Select Case myAuthProperties.CertificateValidationMode
    Case X509CertificateValidationMode.ChainTrust
        Console.WriteLine("ChainTrust")
    Case X509CertificateValidationMode.Custom
        Console.WriteLine("Custom")
    Case X509CertificateValidationMode.None
        Console.WriteLine("ChainTrust")
    Case X509CertificateValidationMode.PeerOrChainTrust
        Console.WriteLine("PeerOrChainTrust")
    Case X509CertificateValidationMode.PeerTrust
        Console.WriteLine("PeerTrust")
    Case Else
        Console.WriteLine("Default")
End Select

该属性也可以在配置文件中设置。

<serviceCredentials>  
  <clientCertificate>  
     <authentication certificateValidationMode='ChainTrust' />  
  </clientCertificate>  
</serviceCredentials>  

注解

允许使用的 X509CertificateValidationMode 的值为：

• ChainTrust

• Custom

• None

• PeerOrChainTrust

• PeerTrust