X509ClientCertificateAuthentication.TrustedStoreLocation Eigenschaft

Definition

Ruft den Speicherort des vertrauenswürdigen Speichers ab, unter dem der Kontext der Clientzertifikatkette überprüft wird, oder legt den Speicherort fest.

public:
 property System::Security::Cryptography::X509Certificates::StoreLocation TrustedStoreLocation { System::Security::Cryptography::X509Certificates::StoreLocation get(); void set(System::Security::Cryptography::X509Certificates::StoreLocation value); };
public System.Security.Cryptography.X509Certificates.StoreLocation TrustedStoreLocation { get; set; }
member this.TrustedStoreLocation : System.Security.Cryptography.X509Certificates.StoreLocation with get, set
Public Property TrustedStoreLocation As StoreLocation

Eigenschaftswert

Der Speicherort des vertrauenswürdigen Speichers, unter dem der Kontext der Clientzertifikatkette überprüft wird.

Ausnahmen

set wenn Anmeldeinformationen schreibgeschützt sind.

Beispiele

// Create a service host.
Uri httpUri = new Uri("http://localhost/Calculator");
ServiceHost sh = new ServiceHost(typeof(Calculator), httpUri);

// Create a binding that uses a certificate.
WSHttpBinding b = new WSHttpBinding(SecurityMode.Message);
b.Security.Message.ClientCredentialType =
    MessageCredentialType.Certificate;

// Get a reference to the authentication object.
X509ClientCertificateAuthentication myAuthProperties =
    sh.Credentials.ClientCertificate.Authentication;
// Configure peer trust.
myAuthProperties.CertificateValidationMode =
    X509CertificateValidationMode.PeerTrust;
myAuthProperties.TrustedStoreLocation =
    StoreLocation.LocalMachine;
' Create a service host.
Dim httpUri As New Uri("http://localhost/Calculator")
Dim sh As New ServiceHost(GetType(Calculator), httpUri)

' Create a binding that uses a certificate.
Dim b As New WSHttpBinding(SecurityMode.Message)
b.Security.Message.ClientCredentialType = _
MessageCredentialType.Certificate

' Get a reference to the authentication object.
Dim myAuthProperties As X509ClientCertificateAuthentication = _
sh.Credentials.ClientCertificate.Authentication
' Configure peer trust.
myAuthProperties.CertificateValidationMode = _
X509CertificateValidationMode.PeerTrust
myAuthProperties.TrustedStoreLocation = StoreLocation.LocalMachine

Die Eigenschaft kann auch in einer Konfigurationsdatei festgelegt werden.

<serviceCredentials>
  <clientCertificate>
     <authentication certificateValidationMode='ChainTrust'   trustedStoreLocation = 'LocalMachine'/>
  </clientCertificate>
</serviceCredentials>

Hinweise

Diese Eigenschaft gibt an, ob Computer- oder Benutzerkontext verwendet wird, um die X.509-Zertifikatkette zu überprüfen.

Gilt für: