how to support Server authentication using the webservice.h win32 lib header

Harsha 0

For the SSL communication, for the sample code which it was developed on Windows win32 – webservice.h library.

with the code changes for SSL communication, we are able to establish a SSL communication(we can see SSL handshake is happening) successfully.

Sample windows code example from the internet which we are referring for this Windows win32 – webservice.h library : sample_code

To do Server authentication in client Side, which is the exact API or function to load the certificate to the SSL bindings for the Server Authentication(server certificate validation), how it can be done.

what are the code changes for the above example in C/C++ to support Server Authentication (Server certificate validation in client side) using the Windows-Win32 webservices.h header.

Thanks

Jeanine Zhang-MSFT 9,181 Reputation points Microsoft Vendor

2024-04-02T09:14:12.2733333+00:00

You could try to use WS_HTTP_HEADER_AUTH_SECURITY_BINDING.The security binding subtype for specifying the use of HTTP header authentication against a target service or a HTTP proxy server based on the basic, digest (RFC 2617) and the SPNEGO (RFC4559) protocols.

When a connection to an HTTP server has been established and headers sent, the WS_CERTIFICATE_VALIDATION_CALLBACK callback is invoked to validate a certificate.

Whether you want the client to validate the server's certificate? I suggest you could refer to the thread:https://stackoverflow.com/questions/408431/how-can-the-ssl-client-validate-the-servers-certificate
Harsha 0 Reputation points

2024-04-05T04:56:56.17+00:00

How to Achieve the Server certification validation in client side (as a part of server authentication).

Please suggest how to use the WS_CERTIFICATE_VALIDATION_CALLBACK for Server certification validation in client side.
Jeanine Zhang-MSFT 9,181 Reputation points Microsoft Vendor

2024-04-05T09:10:58.9366667+00:00

You could refer to the Doc: WS_CERTIFICATE_VALIDATION_CALLBACK callback function
Harsha 0 Reputation points

2024-04-08T05:08:35.13+00:00

For the above example sample_code tried to call this WS_CERTIFICATE_VALIDATION_CALLBACK callback function and pass to my binding method, but didn't get any breakthrough,
Please suggest how to integrate/pass to binding methods for this above callback function.

Thanks,
Jeanine Zhang-MSFT 9,181 Reputation points Microsoft Vendor

2024-04-09T07:12:57.4266667+00:00

If you use WS_SSL_TRANSPORT_SECURITY_BINDING, HTTP header authentication is done in conjunction with transport level security provided by a security binding.

You could try to use WS_SUBJECT_NAME_CERT_CREDENTIAL structureto set the local certificate credential to be used with this security binding. Refer to the code: HttpClientWithSslAndClientCert
Harsha 0 Reputation points

2024-04-10T07:49:25.04+00:00

I tried with Refer to the code: HttpClientWithSslAndClientCert,
this is used to load the Client certificate for client authentication.

In my case client auth is not required for us and I have the Server certificate, so i need to achieve only server authentication (validating the server certificate in client side).
(any chance if the server certificate validation happens Implicitly with cert-manager certificates?)

How to achieve this validating the server certificate in client side?

Thanks
Jeanine Zhang-MSFT 9,181 Reputation points Microsoft Vendor

2024-04-10T09:03:01.34+00:00

Maybe you could refer to the Doc: Manually Validating Schannel Credentials
Jeanine Zhang-MSFT 9,181 Reputation points Microsoft Vendor

2024-04-19T07:34:37.89+00:00

Have you got any updates about this issue?
Harsha 0 Reputation points

2024-04-22T07:18:37.4466667+00:00

From your inputs from the doc: Manually Validating Schannel Credentials -> Schannel validates the *server certificate implicitly.
apart from this didn't get any other inputs.
please suggest if any.

and also, how to add Custom KEY and value to the HTTP Header for the above example.
Example for adding Authorization to HTTP header, so how to add custom header for this ?*
Jeanine Zhang-MSFT 9,181 Reputation points Microsoft Vendor

2024-04-22T08:53:44.99+00:00

As this issue is complex, if you want to resolve this issue as soon as possible, you can open an incident via Contact us tab at link below: https://developer.microsoft.com/en-us/windows/support/

Please choose the Technical Support - Coding/Debugging for Windows SDK for this issue.