y - Net Developer

CHAPTER 12 ■ DEVELOPING PEER-TO-PEER APPLICATIONS WITH WCF 389ramrameshreddy.blog.com■Note How can peer channel verify signatures that are application specific? Well, it can verify signaturesthat are specific to the application because it provides a “hook” that allows you to participate in its signatureverification routine. This hook is in a concrete implementation of the abstract X509CertificateValidatorclass. This allows you to have any criteria for the pass or fail validation.QuickReturnSecureTraderChat SampleThe QuickReturnSecureTraderChat application essentially is the same as theQuickReturnTraderChat sample discussed earlier in the chapter with the exception that this oneuses security. For the sake of simplicity, we implemented this as a separate solution. In the realworld, you would probably read the security information via a configuration setting and basedon that either enable or disable the security options.You can set security, as discussed earlier, using either a password or an X.509 certificate.For this sample, we will use a password, but you will see how easy it is to change this to use acertificate.Service ConfigurationListing 12-9 shows the service side of the configuration, which is similar to the serviceconfiguration used in the earlier example. Although the address and the namespace havebeen updated, the real configuration change is using a different binding depicted by thebindingConfiguration parameter.Listing 12-9. Service Configurationramrameshreddyramrameshreddy