Lưu ý Giao thông vận tải cấp độ bảo mật là một thuật ngữ được sử dụng khi bảo vệ dữ liệu được cung cấp bằng cách đảm bảo các kênh truyền thông riêng của mình. Ví dụ phổ biến nhất là các kênh HTTPS mà đóng chặt kết nối giữa các trình duyệt và máy chủ web. HTTPS là dựa trên giao thức SSL. | CHAPTER 7 EXTENDED WEB SERVICES SECURITY WITH WS-SECURITY AND WS-SECURE CONVERSATION 139 Figure 7-3. The properties of the WSE2QuickStartClient certificate Now choose the Local Computer certificate location and the Personal store to find the WSE2QuickStartServer certificate. If both certificates are there it means that you either installed them automatically through a setup file or manually following the instructions in Chapter 5. The certificates must be installed correctly in order to run this sample. If you get any exceptions during the execution of this sample you should go back to Chapter 5 and review the installation instructions to make sure you didn t miss any important steps. Another option is to run the file that is located under the Sample directory of the Program Files Microsoft WSE directory. 140 CHAPTER 7 EXTENDED WEB SERVICES SECURITY WITH WS-SECURITY AND WS-SECURE CONVERSATION Message Flow Before the communication takes place the client must have access to its own certificate plus the public portion of the server s certificate. The server only needs to have access to its own certificate because the client will attach the public portion of the client certificate to the request. The diagram in Figure 7-4 shows a simplified representation of the steps. Client Attach the client s certificate to the message Ố Attach the client s certificate to the message Sign the message using the client s private key I cc 06 w Validate the client certificate Decrypt the message using the server s private key Validate the client signature using the client s public key or Server Figure 7-4. Mutual certificate assertion message flow The following steps occur when the client makes a call to the service using the mutual certificates pattern 1. Attach certificate The client assumes that the server does not have access to its certificate in a local store. It attaches the certificate information to the outgoing message. 2. Sign the message The
