From d80ea5187791edb0d0387d17841e79a0ab65c06f Mon Sep 17 00:00:00 2001 From: Cyberboss Date: Sun, 24 Sep 2017 12:32:35 -0400 Subject: [PATCH] Fixes transport level security blocking remote access --- TGServerService/ServerService.cs | 1 + TGServiceInterface/Server.cs | 1 + 2 files changed, 2 insertions(+) diff --git a/TGServerService/ServerService.cs b/TGServerService/ServerService.cs index 1241872b77..f277dfd2f9 100644 --- a/TGServerService/ServerService.cs +++ b/TGServerService/ServerService.cs @@ -215,6 +215,7 @@ namespace TGServerService MaxReceivedMessageSize = Server.TransferLimitRemote }; var requireAuth = typetype.Name != typeof(ITGConnectivity).Name; + httpsBinding.Security.Transport.ClientCredentialType = HttpClientCredentialType.None; httpsBinding.Security.Mode = requireAuth ? SecurityMode.TransportWithMessageCredential : SecurityMode.Transport; //do not require auth for a connectivity check httpsBinding.Security.Message.ClientCredentialType = requireAuth ? MessageCredentialType.UserName : MessageCredentialType.None; host.AddServiceEndpoint(typetype, httpsBinding, bindingName); diff --git a/TGServiceInterface/Server.cs b/TGServiceInterface/Server.cs index 7f0d4dc621..9e1d0f7f4a 100644 --- a/TGServiceInterface/Server.cs +++ b/TGServiceInterface/Server.cs @@ -130,6 +130,7 @@ namespace TGServiceInterface MaxReceivedMessageSize = TransferLimitRemote }; var requireAuth = InterfaceName != typeof(ITGConnectivity).Name; + binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.None; binding.Security.Mode = requireAuth ? SecurityMode.TransportWithMessageCredential : SecurityMode.Transport; //do not require auth for a connectivity check binding.Security.Message.ClientCredentialType = requireAuth ? MessageCredentialType.UserName : MessageCredentialType.None; var address = new EndpointAddress(String.Format("https://{0}:{1}/{2}/{3}", HTTPSURL, HTTPSPort, MasterInterfaceName, InterfaceName));