传出消息的身份检查失败。预期的身份是

Posted 2023-04-12

【中文标题】传出消息的身份检查失败。预期的身份是

【英文标题】：The identity check failed for the outgoing message. The expected identity is

【发布时间】：2011-07-31 12:26:26

【问题描述】：

有一个 wcf 服务在我的机器上运行良好。

将其移至服务器，现在出现上述错误。

我在服务器上生成了一个测试证书。

这是我的客户端配置。

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    <runtime>
        <loadFromRemoteSources enabled="true"/>
    </runtime>
    <system.serviceModel>
        <bindings>
            <wsDualHttpBinding>
                <binding name="WSDualHttpBinding_IMessageHandlerServer" closeTimeout="00:01:00"
                    openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
                    bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
                    maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
                    messageEncoding="Text" textEncoding="utf-8" useDefaultWebProxy="true" clientBaseAddress="http://192.168.1.74:8081">
                    <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
                        maxBytesPerRead="4096" maxNameTableCharCount="16384" />
                    <reliableSession ordered="true" inactivityTimeout="00:10:00" />
                    <security mode="Message">
                        <message clientCredentialType="UserName" negotiateServiceCredential="true"
                            algorithmSuite="Default" />
                    </security>
                </binding>
            </wsDualHttpBinding>
        </bindings>
        <client>
            <endpoint address="http://192.168.1.100:8080/" binding="wsDualHttpBinding"
                bindingConfiguration="WSDualHttpBinding_IMessageHandlerServer"
                contract="MessageService.IMessageHandlerServer" name="WSDualHttpBinding_IMessageHandlerServer" behaviorConfiguration="myClientBehavior">
                <identity>
                    <certificate encodedValue="AwAAAAEAAAAUAAAA9fenyF3cSS38ldDDxtUyC8TajBAgAAAAAQAAALgBAAAwggG0MIIBYqADAgECAhD3kPMzVBbXlEAT5S65MldSMAkGBSsOAwIdBQAwFjEUMBIGA1UEAxMLUm9vdCBBZ2VuY3kwHhcNMTEwMjExMTU0MDMwWhcNMzkxMjMxMjM1OTU5WjAXMRUwEwYDVQQDEwxNeVNlcnZlckNlcnQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAJ9D8W2GBGvwTAZ2eQj12atxPruZxuOwTCLXRwtE***oLmlwBuxo7Wb+of0k4XTNLa7q/Xvjh3zsJbvevlPG3hk9+ugds/Je5X69uPbQApYJO2HZNY9hrwfMZ40iaJ54vVAkdnIhDT5pEpmKVFFkPangk1aMyb6Ilm4NjO9bUxjFAgMBAAGjSzBJMEcGA1UdAQRAMD6AEBLkCS0GHR1PAI1hIdwWZGOhGDAWMRQwEgYDVQQDEwtSb290IEFnZW5jeYIQBjdsAKoAZIoRz7jUqlw19DAJBgUrDgMCHQUAA0EAGT7q1aZwAaJ4sMbv53BOo2/yVSpYkTRIaQwT0uYdY1SLyJ7uaUwqJR0jG+nNqwgyOEOfg4Tz0/dX740dw12+1Q==" />
                </identity>
            </endpoint>
        </client>
      <behaviors>
        <endpointBehaviors>
          <behavior name="myClientBehavior">
            <clientCredentials>
              <serviceCertificate>
                <authentication certificateValidationMode="Custom" customCertificateValidatorType="MyX509Validator,MessageHandlerClient" />
              </serviceCertificate>
            </clientCredentials>
          </behavior>
        </endpointBehaviors>
      </behaviors>
    </system.serviceModel>
</configuration>

编辑

代理初始化如下，但这不是引发错误的地方...

InstanceContext context = new InstanceContext(new MyCallback());
            Configuration stockConfiguration = ConfigurationManager.OpenMappedExeConfiguration(new ExeConfigurationFileMap  ExeConfigFilename = @"C:\Users\Ash\Desktop\Config\app.config" , ConfigurationUserLevel.None);

            ConfigurationDuplexChannelFactory<MessageHandlerClient.MessageService.IMessageHandlerServerChannel> stockChannelFactory = new ConfigurationDuplexChannelFactory<MessageHandlerClient.MessageService.IMessageHandlerServerChannel>(context, "WSDualHttpBinding_IMessageHandlerServer", null, stockConfiguration);
            stockChannelFactory.Credentials.UserName.UserName = "test";
            stockChannelFactory.Credentials.UserName.Password = "test";
            stockClient = stockChannelFactory.CreateChannel();

当我使用代理拨打电话时抛出错误，例如

stockClient.messageToServerWithoutDirectReturn(moduleName, moduleType, methodName, inputs);

如果您需要更多信息，请告诉我。

亲切的问候

灰

【问题讨论】：

我假设这发生在您初始化客户端代理时。能否请您显示您在哪里为您的网络服务创建代理的代码？

没有代理初始化工作正常......问题是我实际上通过代理调用一个方法......我在主帖中包含了信息

【参考方案1】：

由于您将客户端移动到另一台服务器并使用新证书，您将需要更新您的身份/证书节点：

        <identity>
            <certificate encodedValue="..." />
        </identity>

它可能仍然指向您客户的身份存储和证书

【讨论】：

谢谢你...我将如何改变它？即我怎么知道将编码值设置为什么？

@user589195：您最初是如何生成配置的？你运行 svcutil 了吗？如果是这样，只需尝试在服务器上再次运行它并替换客户端配置中的相应部分。

感谢您的帮助。刷新了服务引用并在我的外部配置中使用了新生成的编码值。

遇到了同样的问题。。谢谢！

【参考方案2】：

你有两种方法可以改变它。

<identity>
    <certificate encodedValue="the value of base64 encoded value of the certificate that you are using">
</identity>

或

<identity>
    <certificateReference findValue="thumbprint" storeLocation="LocalMachine" storeName="My">
</identity>