如何关闭WCF服务客户端的证书吊销？

Question

如何关闭WCF服务客户端的证书吊销？ 客户端代理由wsdl.exe生成并继承SoapHttpClientProtocol。

Answer 1

我认为你正在寻找ServicePointManager.ServerCertificateValidationCallback：

http://msdn.microsoft.com/en-gb/library/system.net.servicepointmanager.servercertificatevalidationcallback.aspx

，这需要RemoteCertificateValidationCallback代表：

http://msdn.microsoft.com/en-gb/library/system.net.security.remotecertificatevalidationcallback.aspx

我从来没有处理（我有手来处理其他问题，如到期的SSL的）之前吊销的证书，但我猜你只是这样做：

class Program 
{ 
    static void Main(string[] args) 
    { 
     ServicePointManager.ServerCertificateValidationCallback += 
      new RemoteCertificateValidationCallback(ValidateCertificate); 

     // Do WCF calls... 
    } 

    public static bool ValidateCertificate(object sender, X509Certificate cert, 
           X509Chain chain, SslPolicyErrors sslPolicyErrors) 
    { 
     if(sslPolicyErrors == SslPolicyErrors.RemoteCertificateChainErrors) 
     { 
      foreach(X509ChainStatus chainStatus in chain.ChainStatus) 
      { 
       if(chainStatus.Status == X509ChainStatusFlags.Revoked) 
       { 
        return true; 
       } 
      } 
     } 

     return false; 
    } 
} 

Answer 2

您可以设置证书验证在您的应用程序配置文件撤销选项：

http://www.request-response.com/blog/PermaLink,guid,e9bb929b-d0b4-4626-b302-1d2715fc344a.aspx