.NET Framework 4.8下WCF调用SOAP服务遇SHA384ECDSA证书算法不支持问题

问题描述 #

我们通过WCF调用要求客户端和服务端证书的SOAP服务，开发环境使用签名算法为SHA256RSA的客户端证书可正常发起请求；但切换至生产环境，使用签名算法为SHA384ECDSA的证书时，Visual Studio抛出“Certificate algorithm is not supported”异常。项目基于.NET Framework 4.8，相关代码如下：

Sub send()
    Dim clicert = New X509Certificate2("XXXXX",
                                       "pass",
                                       X509KeyStorageFlags.MachineKeySet Or X509KeyStorageFlags.PersistKeySet Or X509KeyStorageFlags.Exportable)

    Dim servcert = New X509Certificate2("XXXXX",
                                        "pass",
                                       X509KeyStorageFlags.MachineKeySet Or X509KeyStorageFlags.PersistKeySet Or X509KeyStorageFlags.Exportable)

    Dim binding = ProduccionGetCustomBinding()

    Dim client As New PortTypeClient(binding, New EndpointAddress(New Uri("urendpoint"),
                                                                 EndpointIdentity.CreateDnsIdentity("dns"), New AddressHeaderCollection()))

    client.ClientCredentials.ClientCertificate.Certificate = clicert
    client.ClientCredentials.ServiceCertificate.DefaultCertificate = servcert

    client.ClientCredentials.ServiceCertificate.Authentication.CertificateValidationMode = System.ServiceModel.Security.X509CertificateValidationMode.None

    Dim obj As New ObjRequest
    Dim resp = client.send(obj)
End Sub

Private Function ProduccionGetCustomBinding() As Binding
    Dim secBE As AsymmetricSecurityBindingElement = SecurityBindingElement.CreateMutualCertificateBindingElement(MessageSecurityVersion.WSSecurity10WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy11BasicSecurityProfile10)

    secBE.SecurityHeaderLayout = SecurityHeaderLayout.Lax
    secBE.EnableUnsecuredResponse = True
    secBE.IncludeTimestamp = True
    secBE.AllowInsecureTransport = True
    secBE.SetKeyDerivation(False)
    secBE.AllowSerializedSigningTokenOnReply = True

    Dim textEncBE As TextMessageEncodingBindingElement = New TextMessageEncodingBindingElement(MessageVersion.Soap11, System.Text.Encoding.UTF8)
    textEncBE.ReaderQuotas.MaxDepth = 32
    textEncBE.ReaderQuotas.MaxStringContentLength = 524288000
    textEncBE.ReaderQuotas.MaxArrayLength = 524288000
    textEncBE.ReaderQuotas.MaxBytesPerRead = 524288000
    textEncBE.ReaderQuotas.MaxNameTableCharCount = 524288000

    Dim httpsBE As HttpsTransportBindingElement = New HttpsTransportBindingElement
    httpsBE.RequireClientCertificate = True

    Dim myBinding As CustomBinding = New CustomBinding()
    myBinding.Elements.Add(secBE)
    myBinding.Elements.Add(textEncBE)
    myBinding.Elements.Add(httpsBE)

    Return myBinding
End Function

异常原因 #

• 安全协议版本不兼容：代码中使用的MessageSecurityVersion.WSSecurity10WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy11BasicSecurityProfile10属于WSSecurity 1.0系列，该版本规范对ECDSA（椭圆曲线数字签名算法）的支持有限，无法识别SHA384ECDSA这类算法。
• 未显式配置ECDSA兼容算法套件：默认的不对称安全绑定元素未指定支持ECDSA的算法套件，导致WCF无法匹配SHA384ECDSA签名算法。

解决方案 #

1. 升级MessageSecurityVersion #

将安全协议版本替换为支持ECDSA的WSSecurity 1.1及以上版本，例如：
MessageSecurityVersion.WSSecurity11WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy12BasicSecurityProfile10

2. 显式指定支持SHA384ECDSA的算法套件 #

在AsymmetricSecurityBindingElement中设置兼容的算法套件，比如SecurityAlgorithmSuite.Basic384，该套件支持SHA384哈希算法和ECDSA签名。

3. 优化证书加载参数 #

ECDSA证书通常不需要Exportable标记（除非你确实需要导出私钥），可以简化X509KeyStorageFlags，避免不必要的权限问题：

Dim clicert = New X509Certificate2("XXXXX",
                                   "pass",
                                   X509KeyStorageFlags.MachineKeySet Or X509KeyStorageFlags.PersistKeySet)

修改后的绑定配置代码 #

Private Function ProduccionGetCustomBinding() As Binding
    ' 使用支持ECDSA的安全协议版本
    Dim secBE As AsymmetricSecurityBindingElement = SecurityBindingElement.CreateMutualCertificateBindingElement(MessageSecurityVersion.WSSecurity11WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy12BasicSecurityProfile10)
    
    ' 指定支持SHA384ECDSA的算法套件
    secBE.DefaultAlgorithmSuite = SecurityAlgorithmSuite.Basic384
    
    secBE.SecurityHeaderLayout = SecurityHeaderLayout.Lax
    secBE.EnableUnsecuredResponse = True
    secBE.IncludeTimestamp = True
    secBE.AllowInsecureTransport = True
    secBE.SetKeyDerivation(False)
    secBE.AllowSerializedSigningTokenOnReply = True

    Dim textEncBE As TextMessageEncodingBindingElement = New TextMessageEncodingBindingElement(MessageVersion.Soap11, System.Text.Encoding.UTF8)
    textEncBE.ReaderQuotas.MaxDepth = 32
    textEncBE.ReaderQuotas.MaxStringContentLength = 524288000
    textEncBE.ReaderQuotas.MaxArrayLength = 524288000
    textEncBE.ReaderQuotas.MaxBytesPerRead = 524288000
    textEncBE.ReaderQuotas.MaxNameTableCharCount = 524288000

    Dim httpsBE As HttpsTransportBindingElement = New HttpsTransportBindingElement
    httpsBE.RequireClientCertificate = True

    Dim myBinding As CustomBinding = New CustomBinding()
    myBinding.Elements.Add(secBE)
    myBinding.Elements.Add(textEncBE)
    myBinding.Elements.Add(httpsBE)

    Return myBinding
End Function

额外注意事项 #

• 确认生产环境操作系统（Windows 10/Server 2016及以上）默认支持ECDSA加密库，.NET Framework 4.8本身已包含ECDSA支持，但需要系统底层组件配合。
• 检查ECDSA证书的私钥权限，确保运行程序的账户拥有读取私钥的权限，可通过证书管理器调整私钥的访问控制列表（ACL）。

内容的提问来源于stack exchange，提问作者Alfredo Ortiz