X509ClientCertificateAuthentication.CertificateValidationMode Property

public:
 property System::ServiceModel::Security::X509CertificateValidationMode CertificateValidationMode { System::ServiceModel::Security::X509CertificateValidationMode get(); void set(System::ServiceModel::Security::X509CertificateValidationMode value); };

public System.ServiceModel.Security.X509CertificateValidationMode CertificateValidationMode { get; set; }

member this.CertificateValidationMode : System.ServiceModel.Security.X509CertificateValidationMode with get, set

Public Property CertificateValidationMode As X509CertificateValidationMode

Property Value

One of the X509CertificateValidationMode values.

Examples

The following example uses the CertificateValidationMode to print to the screen.

// Create a service host.
Uri httpUri = new Uri("http://localhost/Calculator");
ServiceHost sh = new ServiceHost(typeof(Calculator), httpUri);

// Create a binding that uses a certificate.
WSHttpBinding b = new WSHttpBinding(SecurityMode.Message);
b.Security.Message.ClientCredentialType =
    MessageCredentialType.Certificate;

// Get a reference to the authentication object.
X509ClientCertificateAuthentication myAuthProperties =
    sh.Credentials.ClientCertificate.Authentication;

switch (myAuthProperties.CertificateValidationMode)
{
    case X509CertificateValidationMode.ChainTrust:
        Console.WriteLine("ChainTrust");
        break;
    case X509CertificateValidationMode.Custom:
        Console.WriteLine("Custom");
        break;
    case X509CertificateValidationMode.None:
        Console.WriteLine("ChainTrust");
        break;
    case X509CertificateValidationMode.PeerOrChainTrust:
        Console.WriteLine("PeerOrChainTrust");
        break;
    case X509CertificateValidationMode.PeerTrust:
        Console.WriteLine("PeerTrust");
        break;
    default:
        Console.WriteLine("Default");
        break;
}

' Create a service host.
Dim httpUri As New Uri("http://localhost/Calculator")
Dim sh As New ServiceHost(GetType(Calculator), httpUri)

' Create a binding that uses a certificate.
Dim b As New WSHttpBinding(SecurityMode.Message)
b.Security.Message.ClientCredentialType = _
MessageCredentialType.Certificate

' Get a reference to the authentication object.
Dim myAuthProperties As X509ClientCertificateAuthentication = _
sh.Credentials.ClientCertificate.Authentication()

Select Case myAuthProperties.CertificateValidationMode
    Case X509CertificateValidationMode.ChainTrust
        Console.WriteLine("ChainTrust")
    Case X509CertificateValidationMode.Custom
        Console.WriteLine("Custom")
    Case X509CertificateValidationMode.None
        Console.WriteLine("ChainTrust")
    Case X509CertificateValidationMode.PeerOrChainTrust
        Console.WriteLine("PeerOrChainTrust")
    Case X509CertificateValidationMode.PeerTrust
        Console.WriteLine("PeerTrust")
    Case Else
        Console.WriteLine("Default")
End Select

The property can also be set in a configuration file.

<serviceCredentials>  
  <clientCertificate>  
     <authentication certificateValidationMode='ChainTrust' />  
  </clientCertificate>  
</serviceCredentials>  

Remarks

Allowed values of X509CertificateValidationMode are:

• ChainTrust

• Custom

• None

• PeerOrChainTrust

• PeerTrust