title: Restful service with SSL
body: <p>Hi I have created a Restful service and I have a Post method which the client calls Post method.(WCF DOT net 4.0 VS 2012)</p>
  
  <p>My client told me that he wont supply any certificate to me and I need to authenticate only with my certificate only ( one way authentication thats what he says)</p>
  
  <ol>
  <li>I got .pfx file from my certificate authority and installed the .pfx in IIS 7 using the import option.</li>
  <li>Created a web site and make it Https 443 port and selected the imported .pfx file from the drop down</li>
  <li>Select my web site and select SSL Settings and checked require SSL and checked Accept option button - on Client certificates</li>
  </ol>
  
  <p>I did the following change in my config file to indicate this site is using SSL</p>
  
  <pre><code>   'security mode="Transport"
          transport clientCredentialType="None"
        security'
  </code></pre>
  
  <p>My question is</p>
  
  <ol>
  <li>Did my client has to install a .cert file in his machine which is signed by my CA ?</li>
  <li>If he installs that is enough or he need to use that cert file in his every request?</li>
  <li>How I am sure if the someone use the someother cert file that is signed by my CA ? </li>
  <li>How I can validate the certificate?</li>
  <li>Is anything is missing here for SSL HTTPS communication.</li>
  </ol>
  
  <p>Please guide me for to make a secured Restful service using SSL.</p>