Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My WCF service with a custom client certificate validator works fine in my non load balanced environment.

When first deployed to BIG-IP environment there was a problem with it stripping SSL information and ending up sending only http information to the service, which did not work at all.

But after this was solved with some BIG-IP settings i now experience that the service completely ignores the custom certificate validator and lets any client certificate through. The log shows that the Validate method of my custom X509CertificateValidator is never called as it is in the non load balanced environment.

I do not know where to start... I suppose it is still a load balancer issue.

share|improve this question

The answer is apparently to subclass HttpBindingTransportElement and make it lie when asked whether it supports SSL. WCF will then accept non-Windows creds, e.g. client certs. I haven't tried this yet, but these posts seem pretty authoritative.

Example 1 of approach

Example 2 of approach

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.