Problem in using certificates in wcf nettcp

See more:

WCF

I am trying to learn how to use certificates for mutual authentication over net tcp binding of WCF. My requirement is if client can produce correct certificate to the server , then only
client will be able to communicate otherwise not.

Below is the example of the project I created for the same.

1>First I created the certificates by the below commands

Creation of the Root Certificates
----------------------------------------------------------------------

makecert -n "CN=RootCATest" -r -sv RootCATest.pvk RootCATest.cer -ss TrustedPeople -sr localmachine

Creation of the client certificate in My locations from the root certificate
---------------------------------------------------------------------------------------------
makecert -sk localhost -iv RootCATest.pvk -n "CN=localhost" -ic RootCATest.cer -sr localmachine -ss my -sky exchange -pe

Creation of the service certificate in trusted people location from the root certificate(I created this one in trusted people location otherwise server was throwing error that certificate not present in trusted people store )
--------------------------------------------------------------------------------------------------------
makecert -sk localhost -iv RootCATest.pvk -n "CN=localhost" -ic RootCATest.cer -sr localmachine -ss trustedpeople -sky exchange -pe

2>Below is the server and client code
-----------------------------------
Server code:
----------------------------------
namespace NetTcpBindingDemo
{
using System.Net;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;

class Program
{
static void Main(string[] args)
{
var b = new NetTcpBinding();
b.Security.Mode = System.ServiceModel.SecurityMode.TransportWithMessageCredential;
b.Security.Transport.ClientCredentialType = TcpClientCredentialType.Certificate;
b.Security.Transport.ProtectionLevel = ProtectionLevel.EncryptAndSign;

var sh = new ServiceHost(typeof(EchoService));
sh.AddServiceEndpoint(typeof(IEchoService), b, "net.tcp://localhost:56111/EchoService");
sh.Credentials.ServiceCertificate.SetCertificate(StoreLocation.LocalMachine,StoreName.TrustedPeople,X509FindType.FindByIssuerName, "RootCATest");

sh.Open();
Console.ForegroundColor = ConsoleColor.Green;
Console.WriteLine("EchoService has started.");
Console.ResetColor();
Console.ReadLine();
}
}
}
--------------------------------------------
Client Code:
--------------------------------------------
namespace NetTcpBindingDemo
{
using System.Diagnostics;
using System.Net;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;
using System.ServiceModel;
using System.ServiceModel.Security;

internal class Program
{
private static void Main(string[] args)
{
var address = new EndpointAddress(new Uri("net.tcp://localhost:56111/EchoService"));

var b = new NetTcpBinding();
b.Security.Mode = SecurityMode.TransportWithMessageCredential;
b.Security.Transport.ClientCredentialType = TcpClientCredentialType.Certificate;
b.Security.Transport.ProtectionLevel = ProtectionLevel.EncryptAndSign;

var channelFactory = new ChannelFactory<iechoservice>(b, address);
channelFactory.Credentials.ClientCertificate.SetCertificate(
StoreLocation.LocalMachine, StoreName.My, X509FindType.FindByIssuerName, "RootCATest");

channelFactory.Credentials.ServiceCertificate.Authentication.CertificateValidationMode =
X509CertificateValidationMode.PeerTrust;
var client = channelFactory.CreateChannel(address);

// var client = new EchoServiceClient();
Console.ForegroundColor = ConsoleColor.Yellow;

var c = client as ICommunicationObject;
Console.WriteLine("Verifying Certificate...........");
c.Open();
Console.WriteLine("Certificate verification done...........");
client.Echo("Hello World\\n");
}
}
}
-------------------------------------------------------------------------

The interesting part is if I dnt set the certifciate in the client side then also client is able to communicate with server,even if I put a different certificate in client then also the same.

Please let me know what to do so that the client can authenticate correctly to the server using the certificates?