Named Mutex (I think) - C# Discussion Boards

Webservice over SSL with multiple servers

23-Sep-03 13:04

It's all a matter of personal preference. It certainly doesn't hurt anything (like I said, whether or not you use this, it compiles to the same IL instructions). I use it merely for code-readability...well, that I can type "this." faster than hitting Ctrl+J! Smile | :)

While I think too many "developers" (see my personal message board for comments!) rely merely on IntelliSense for their stumbling around...er, coding...it the auto-complete does come in handy for coding faster and avoiding fewer spelling errors.

Again, though, it's all a matter of personal preference. I know that this ( and Me, although I hate languages that "use me" Laugh | :laugh:

) is implicit (heck, I've been doing this a very long time) but I just personally find it easier to see what's what as I'm flying through code.

And, yes, explicit interfaces are definitely cool - sometimes even necessary (ex: interface member collisions). They can also help hide a lot of the implementation details and force developers using your library to treat your object as a specific interface rather than just your Type (hopefully forcing good OO development).

-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----

solidstore23-Sep-03 1:14

solidstore

23-Sep-03 1:14

We have four web servers each hosting our web service. We use DNS round robin to load balance across these four servers. In order to use SSL we have a certificate called for example, www.loadbalanced.com which is installed on all four machines. Things work beautifully.

However,

We now have a new internal application that needs to consume the web service over SSL but requires access to specific web servers, i.e. using they internal hostname, Unfortunely the SSL connection no longer works, I'm assuming this is because the hostname does not match the SSL certificate name. Can this be programmatically overriden? Just like clicking the security warning dialog box that appears when browsing a secure site using IE with a different hostname.

Many thanks in advance.

ps Alternative ways of depoloying the application to achieve the same affect also welcomed

Heath Stewart23-Sep-03 3:25

23-Sep-03 3:25

There doesn't seem to be any way to override it without implementing your own SSL handshaking. The fact that IE (or any web browser for that matter) allows you to do that isn't actually an accepted process since it means the certificate is not verifiable and be using an ADK to encrypt for a different server.

Now, I'm not sure about your network topology, but in our setup, the web servers sit on a DMZ and have different names internally and externally. SSL could be forced on the site for external use but not for internal use (controlled by the firewall). Since this app is internal, why not just let it talk to the servers insecurely? Heck, you don't even need a DMZ to accomplish this, it's just easier to tell IIS how to differentiate traffic in case you've set IIS up to force SSL for connections. If you haven't done this for the whole site, you don't need to do anything really. Just segment the services so that the ones your clients use are forced to SSL and the ones you use aren't. If this is an externally deployed web site, you could do the same thing but you should take a look at WS-Security to secure your services. This could even be used for client access, but puts more burden on the developers as opposed to IIS, so it isn't always desired.

solidstore23-Sep-03 3:54

solidstore

23-Sep-03 3:54

We have a similar topology with a DMZ but unfortunetly require ALL traffic to be secured with SSL (or other encryption) because of the sensitive data.
How do we 'tell IIS to differentiate traffic', do you mean set different SSL requirements on different virtual directories? what if our internal & external clients are using the same pages?
I'll have a read through WS-Security but I was hoping that IIS and ASP.NET could already handle this

Heath Stewart23-Sep-03 4:34

23-Sep-03 4:34

There are several ways you can do this. Our DMZ, for example, is on the reserved subnet 172.16. We have two IP addresses bound to it for different apps. You could, instead, bind two different IPs to each machine and have the firewall redirect to the appropriate IP based on whether or not the traffic is internal or external. Then in IIS, make two different Web apps pointing to the same directory. For the external web app, require SSL. For the internal web app, leave it as optional.

If you did use WS-Security, you could get around this by checking the remote machine's IP and and skip encryption and verification for that traffic. Again, though, this will leave you with some of the work, although WS-Security does make it easier than just using the crypto classes directly.

You may find, too, that WS-Security gives you some additional features that would be nice in your app, such as policies for requiring certain things. It will require some changes in both the client and server, but depending on your business model it may be better in the end.

The big problem is that the .NET BCL doesn't really have a way for overriding the SSL handshaking that I've ever seen. If the SSL cert doesn't verify, an exception is thrown. There doesn't seem to be a way to change that. Technically speaking, that's the way it should be (you wouldn't want to trust a certificate from the server with an ADK since that opens you up for a man-in-the-middle attack), but I can understand that it isn't always desired. Perhaps you can make a comment to the .NET team for future enhancements on the .NET section of MSDN.

Heath Stewart23-Sep-03 4:36

Re: Named Mutex (I think)

23-Sep-03 4:36

Oh, one more thing. VeriSign does offer domain certificates. I don't know exactly how they work since it's been a long time since I've looked into what they offer, but it might be worth checking out. I don't know if the certificate contains special OIDs or something, or if you can just buy bulk certificates, but each server could, potentially, be able to use different keys based on the requested Host header.

Named Mutex (I think)

James Simpson23-Sep-03 0:52

James Simpson

23-Sep-03 0:52

Hi,

If I want to serialize access to different resorces can I use a Named Mutex?

eg: I want to serialize access to a folder from different threads, can I do the following

Mutex oMutex = new Mutex(sFolderSpec);

oMutex.WaitOne()

oMutex.ReleaseMutex();

then in a different thread, have a different instance of the mutex, but with the same name

Mutex oMutex = new Mutex(sFolderSpec)
oMutex.WaitOne()

oMutex.ReleaseMutex();

I guess what I am asking is, Can I create the mutex in the function where I want the lock and dispose of it afterwards, and any other calls the same function by a different thread will lock until its released - or do I need an instance already created and accessible to each thread?

Thanks, James

James Simpson
Web Developer
imebgo@hotmail.com

Heath Stewart23-Sep-03 3:31

Re: Named Mutex (I think)

23-Sep-03 3:31

No, you merely need to use a named mutex in a different instance per thread, although sharing that object would work, too. The Mutex class is just a wrapper for a system object. A named mutex can even be used to synchronize different processes.

Also, you don't necessarily have to worry about disposing of it in any thread. The CLR will take care of cleaning up the memory - that's the whole point of managed code! Smile | :)

This should aleviate some of the burden you may think you have of trying to wait until the last thread has released the mutex before destroying it - you won't have to.

Blake Coverett23-Sep-03 6:14

Blake Coverett

23-Sep-03 6:14

Actually, Mutex and friends all implement IDisposable - you _should_ worry about disposing them correctly. Sure the CLR will eventually finalize them for you and release the underlying unmanaged resource, but at some arbitrary time in the future, not when the last reference is released.

Unless your design calls for holding the object till process termination anyway, you should Dispose your IDisposables.

--
-Blake (com/bcdev/blake)

aspnet_wp.exe restarting unexpectedly

solidstore22-Sep-03 23:52

solidstore

22-Sep-03 23:52

Our web service occassionaly becomes unavailble to clients because the aspnet_wp.exe process is being restarted. We have some very strange event messages in the Application logs when this happens. Can anyone shed any light on these messages and what could be wrong?

Event Type: Error
Event Source: ASP.NET 1.1.4322.0
Event Category: None
Event ID: 1000
Date: 05/09/2003
Time: 10:40:48
User: N/A
Computer: SUENG01
Description:
aspnet_wp.exe (PID: 1632) stopped unexpectedly.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: .NET Runtime
Event Category: None
Event ID: 0
Date: 05/09/2003
Time: 10:40:48
User: N/A
Computer: SUENG01
Description:
The description for Event ID ( 0 ) in Source ( .NET Runtime ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .NET Runtime version 1.1.4322.573- Setup Error: Failed to load resources from resource file
Please check your Setup.

Event Type: Error
Event Source: ASP.NET 1.1.4322.0
Event Category: None
Event ID: 1090
Date: 09/09/2003
Time: 00:34:23
User: N/A
Computer: SUENG03
Description:
Failed to execute request because QueryInterface for ASP.NET runtime failed. Error: 0x80004005 Unspecified error

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Outlook Automation and sending Bulk E-mail

Braulio Dez22-Sep-03 23:44

Braulio Dez

22-Sep-03 23:44

Hi,

I need to add to my application to send "bulk EMail", just notify 200 clients about an event or... ( no spamming Smile | :)

, just real clients).

I know how to send an e-mail using Outlook, but no sure how to make it for groups of people, and via automation.

Thanks in advance, Greetings
Braulio

Theoretical Question on object creation

Rohde22-Sep-03 23:09

Rohde

22-Sep-03 23:09

I've got a question on the finer apsects of object creation. The books I've consulted are somewhat vague on this point.

When I write the following:

Forms myForm;

I create a Form variable on the stack which can point to an object on the heap. No object is created. What I'm not sure about is if this also reserves the space needed on the heap for later object creation or if that space on the heaop doesn't get reserved until I actually create the object with new?

Ergo, when do the CLR actually reserve some space on the heap for an object? Does this happen when I declare my reference, or won't it happen until I use the new operator?

shaunAustin22-Sep-03 23:16

shaunAustin

22-Sep-03 23:16

I don't know for certain but I would expect that the space is only allocated on the heap when the new operator is used...

...fascinating question... I just might look into it!!...

Big Grin | :-D

-----------------------------------------------------------------------
Shaun Austin: .NET Specialist. Spreading the word of .NET to the world... well the UK... well my tiny corner of it!! Big Grin | :-D

Rohde22-Sep-03 23:30

Rohde

22-Sep-03 23:30

Yeah so would I. But the MCAD study guide from MS which I'm reading at the moment is extremely vague about this and uses the terms object and variable interchangeably which leads to confusion Smile | :)

According to that book it seems space gets reserved when I declare the reference and that just seems odd to me.... Big Grin | :-D

Blake Coverett22-Sep-03 23:32

Blake Coverett

22-Sep-03 23:32

If it suggests such a thing ignore it, it is lying.

-Blake (shaking his head)