summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndrew Arnott <andrewarnott@gmail.com>2009-03-16 19:40:38 -0700
committerAndrew Arnott <andrewarnott@gmail.com>2009-03-16 19:40:38 -0700
commitf6a95144a617f391f3d947e01fb645a1483cd3eb (patch)
tree818f141dd839721a06053fa38de02e35f7689041
parentd63dada1e604b5d29c921056f2624271f0ecd5aa (diff)
downloadDotNetOpenAuth-f6a95144a617f391f3d947e01fb645a1483cd3eb.zip
DotNetOpenAuth-f6a95144a617f391f3d947e01fb645a1483cd3eb.tar.gz
DotNetOpenAuth-f6a95144a617f391f3d947e01fb645a1483cd3eb.tar.bz2
Added CRL check to RP samples.
-rw-r--r--samples/RelyingPartyMvc/Web.config9
-rw-r--r--samples/RelyingPartyWebForms/Web.config9
2 files changed, 18 insertions, 0 deletions
diff --git a/samples/RelyingPartyMvc/Web.config b/samples/RelyingPartyMvc/Web.config
index 32d146c..03c7fc4 100644
--- a/samples/RelyingPartyMvc/Web.config
+++ b/samples/RelyingPartyMvc/Web.config
@@ -48,6 +48,15 @@
<iriParsing enabled="true" />
</uri>
+ <!-- This setting causes .NET to check certificate revocation lists (CRL)
+ before trusting HTTPS certificates. But this setting tends to not
+ be allowed in shared hosting environments. -->
+ <system.net>
+ <settings>
+ <servicePointManager checkCertificateRevocationList="true"/>
+ </settings>
+ </system.net>
+
<appSettings/>
<connectionStrings/>
<system.web>
diff --git a/samples/RelyingPartyWebForms/Web.config b/samples/RelyingPartyWebForms/Web.config
index 2dadb77..934510c 100644
--- a/samples/RelyingPartyWebForms/Web.config
+++ b/samples/RelyingPartyWebForms/Web.config
@@ -32,6 +32,15 @@
<iriParsing enabled="true" />
</uri>
+ <!-- This setting causes .NET to check certificate revocation lists (CRL)
+ before trusting HTTPS certificates. But this setting tends to not
+ be allowed in shared hosting environments. -->
+ <system.net>
+ <settings>
+ <servicePointManager checkCertificateRevocationList="true"/>
+ </settings>
+ </system.net>
+
<system.web>
<!--<sessionState cookieless="true" />-->
<compilation debug="true"/>