Monday, April 2, 2007

Switch from FindByThumbprint to FindBySubject

Just FYI - I have switched ServerSync to use FindBySubject instead of FindByThumbprint to determine which X509 Certificate to load for SSL. Therefore Huddle expects the server to hold a certificate within LocalMachine with a subject exactly equal to the ServerLocation (ex. localhost, ath-huddle.unl.edu, 192.168.2.100) specified within the registry. The CertificateThumbprint entry within the registry is now ignored. This should effect just about no one, but still noted.

2 comments:

Jon Dokulil said...

is this related to the change we had to make inside that Certs.msc to move our cert from Current User to Local Computer?

Brian Kaiser said...

well kindof, it is the same cert, this change just relates to how WCF find the certificate within the Certificate Store. Now I attempt to dynamically find the certificate from its name instead of requiring the exact certificate thumbprint before hand.