Configure wsDualHttpBinding with https

Question

I am trying to configure my wcf service to use a wsDualHttpBinding over https. My current config looks like this:

Service

<service behaviorConfiguration="SecureBackendWebServiceBehavior"
      name="WebService.InternalService.BackendWebService">
      <endpoint address="" 
        binding="wsDualHttpBinding" 
        bindingConfiguration="SecureBackendWebServiceWsDualHttpBinding"
        name="BackendWebServiceEndpoint" 
        contract="WebService.InternalService.IBackendWebService"/>
</service>

Binding

<binding name="SecureBackendWebServiceWsDualHttpBinding" 
  receiveTimeout="00:05:00"
  bypassProxyOnLocal="false" 
  transactionFlow="true" 
  maxBufferPoolSize="2147483647"
  maxReceivedMessageSize="2147483647" 
  messageEncoding="Mtom">
        <readerQuotas maxDepth="2147483647" 
           maxStringContentLength="2147483647"
           maxArrayLength="2147483647" 
           maxBytesPerRead="2147483647" 
           maxNameTableCharCount="2147483647" />
      <security mode="Message">
        <message clientCredentialType="Certificate" />
      </security>
</binding>

Behavior

<behavior name="SecureBackendWebServiceBehavior">
      <serviceMetadata httpsGetEnabled="true"/>
      <serviceDebug includeExceptionDetailInFaults="true" />
</behavior>

When i call the service in my browser it says: No baseaddress for schema "http" found with the the endpoint binding WSDualHttpBinding. Registered baseaddressschema is [https].

By googeling the problem I only end up with samples for normal wsHttpBindings but nothing for the dual binding. I already enterd a HttpsGetUrl but ended up with the same error. Have I overseen some value, or why is he trying to get the information over http?

Btw. changing the binding to NetTcp is not an option!

Hope any of you can help me here. thx

score 1 · Answer 1 · answered Jan 10 '13 at 16:36

1

wsDualHttpBinding doesn't support transport security.

MSDN:

The WSDualHttpBinding provides the same support for Web Service protocols as the WSHttpBinding, but for use with duplex contracts. WSDualHttpBinding only supports SOAP security and requires reliable messaging.

So you can rely on message security here only.

answered Jan 10 '13 at 16:36

Maksym Strukov

2,679
1
13
17

I am aware that the dual binding doesn't support transport security, and I am not trying to achive this. What I try is to use the SSL certificate to sign and crypt my message, but when i try to receive the metadata of my service, i get the message described in be question. For now I have a valid certificate on my server and all of my wsHttpBindings replay to the request correctly using https. – Christoph Jan 15 '13 at 09:44

Christoph · Accepted Answer · 2013-01-16T08:23:33.603

Found a solution on my own. I used the patterns & practices Improving Web Services Security: Scenarios and Implementation Guidance for WCF to get a better understanding of security in WCF. This book also includes HowTos for certain scenarios. Only thing I had to do additional.

Because my Web Service is separated in three smaller services, one of them is using the WsDualHttpBinding I needed to tell iis that this one doesn't requires the ssl certificate for transport.

For now on my service talks, but I need to check if it really uses the security I want to have.

UPDATE: Found this article that also contains a step by step tutorial.

Configure wsDualHttpBinding with https

2 Answers2