WCF Http Bindings, Require SSL

Question

I have the following binding I'm using with my wsHttpBinding webservice.

<binding name="wsHttpConfig">
  <security>
    <transport clientCredentialType="None"/>
  </security>
</binding>

The issue is that it allows for the client to connect using either Http or Https. I would like to require them to use SSL. I tried adding the following:

<system.web.extensions>
  <scripting>
    <webServices>
      <authenticationService enabled="true" 
         requireSSL = "true"/>
    </webServices>
  </scripting>
</system.web.extensions>

But it had no effect; client could still connect with Http. I then tried checking the "Require SSL" in the IIS7 SSL Settings and had client certificates radio set to Accept. Now, when I try to view the service I am getting the error "Could not find a base address that matches scheme http for the endpoint with binding WSHttpBinding. Registered base address schemes are [https]."

Anyone know exactly how to fix this error? I have been googling for the last 3 hours trying 500 different combinations (not 500, but too many to list) and could not get anything to run.

Answer 1

Have you read this msdn post?

You must either change

binding="mexHttpBinding"

to

binding="mexHttpsBinding"

or else add an http base address in addition to the https base address. (Right now the metadata endpoint is trying to get hosted on http, rather than https, and there's no base address for that.)

• Have you correctly configured your endpoint?
• Have you tried dynamically configuring the base address?

Answer 2

must either change

binding="mexHttpBinding"

to

binding="mexHttpsBinding"

or else add an http base address in addition to the https base address. (Right now the metadata endpoint is trying to get hosted on http, rather than https, and there's no base address for that.)

Answer 3

Hi, I configured Web.Config as i mentioned below. When i browse .SVC file, throwing error as Could not find a base address that matches scheme https for the endpoint with binding WebHttpBinding. Registered base address schemes are [http].

Answer 4

In a few days I'll post a project with full source code in www.ittraining.com.ar . It works with username/password authentication without SSL, without credentials, without https. It works in any hosting!

Answer 5

For anyone stumbling across this one from Google, Bing (Bingle, Yangle?) then take a look at a blog post a put together to help others trying to run a secure AuthenticationService in a test environment.

http://www.lukepuplett.com/2010/07/setting-up-wcf-over-ssl-on-iis-7x.html

And good luck!