client-certificates

How Chrome browser know which client certificate to prompt for a site?

女生的网名这么多〃 提交于 2019-12-03 04:47:50
I'm setting up certificate authentication for my project using Tomcat. It works ok for command line client such as cURL. I have many client certificates installed in Chrome browser. Some are using to connect to my site, others are used for different purposes and not relate to my project. Every time I connect to my site, Chrome presents a list of client certificates for choosing. These are exactly the certificates that I installed and not others. My questions are: How Chrome knows which client certificates are for a site to present for choosing? Tomcat stores those client certificates in its

Authenticating a self-signed certificate for LDAPS connection

时光毁灭记忆、已成空白 提交于 2019-12-03 04:06:44
I want to make a secure ldap connection(ldaps) from a Linux(Linux 3.2.0-4-amd64 #1 SMP Debian 3.2.51-1 x86_64 GNU/Linux) client to a Windows 2012 server, to change user passwords in active directory, through php. For that, I've created a self-signed certificate(using Windows Server Manager) on the server, but when I try to connect, I get the following error(by turning debugging option on: ldap_set_option(NULL, LDAP_OPT_DEBUG_LEVEL, 7); ): ldap_create ldap_url_parse_ext(ldaps://xxx.xxx.xxx.xxx) ldap_bind_s ldap_simple_bind_s ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_new

IIS 7 Error “A specified logon session does not exist. It may already have been terminated.” when using https

微笑、不失礼 提交于 2019-12-03 03:25:45
问题 I am trying to create Client Certificates Authentication for my asp.net Website. In order to create client certificates, I need to create a Certificate Authority first: makecert.exe -r -n “CN=My Personal CA” -pe -sv MyPersonalCA.pvk -a sha1 -len 2048 -b 01/01/2013 -e 01/01/2023 -cy authority MyPersonalCA.cer Then, I have to import it to IIS 7, but since it accepts the .pfx format, i convert it first pvk2pfx.exe -pvk MyPersonalCA.pvk -spc MyPersonalCA.cer -pfx MyPersonalCA.pfx After importing

How do I create client certificates for local testing of two-way authentication over SSL?

佐手、 提交于 2019-12-03 02:21:48
问题 I'm trying to set-up two-way authentication on a web app running on IIS7. The clients are going to mostly be mobile devices and in the first instance I'm trying to get a demo running using a 3rd generation iPad. I thought I'd start with getting it running on my workstation (which is also running IIS) first and then copy the working certificate over the the iPad. However I've hit a wall. I've got as far as having the site running securely over https and have installed a self-signed server

Android WebView handle onReceivedClientCertRequest

左心房为你撑大大i 提交于 2019-12-03 01:13:18
I'm developing an Android app using Client Certificate Authentication within WebView. The certificate (cert.pfx) and password are embedded in the application. When executing Client Certificate Authentication request with ajax call in the WebView, the following function getting called : @Override public void onReceivedClientCertRequest(WebView view, final ClientCertRequest request) {} As I understend I need to call : request.proceed(PrivateKey privateKey, X509Certificate[] chain) Any idea how to create the PrivateKey and X509Certificate objects from the embedded certificate in order to proceed

Disable SSL client certificate on *some* WebAPI controllers?

假装没事ソ 提交于 2019-12-02 22:12:21
Edit for future readers : Unfortunately, the bounty awarded answer doesn't work; nothing I can do about that now. But read my own answer below (through testing) - confirmed to work with minimal code changes We have an Azure Cloud Service (WebRole) that's entirely in ASP.NET WebAPI 2.2 (no MVC, front end is Angular). Some of our controllers/REST endpoints talk to a 3rd party cloud service over SSL (client cert auth/mutual auth) and the rest of the controllers/endpoints talk to the HTML5/AngularJS front end, also over SSL (but more traditional server auth SSL). We don't have any non-SSL endpoint

Android 2.2 SSL Bug with client certificate?

冷暖自知 提交于 2019-12-02 21:15:32
问题 My question: Has anyone successfully authenticated the SSL connection with client certificate in Android 2.1/2.2 with multiple cert chain? The details: I am trying to implement a client certificate authentication for Android platform. There are plenty of discussion already in StackOverflow on how to do it using KeyStore and I am following the standard approach by supplying them to the SSLContext. context.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers() ,null);

IIS 7 Error “A specified logon session does not exist. It may already have been terminated.” when using https

核能气质少年 提交于 2019-12-02 17:50:28
I am trying to create Client Certificates Authentication for my asp.net Website. In order to create client certificates, I need to create a Certificate Authority first: makecert.exe -r -n “CN=My Personal CA” -pe -sv MyPersonalCA.pvk -a sha1 -len 2048 -b 01/01/2013 -e 01/01/2023 -cy authority MyPersonalCA.cer Then, I have to import it to IIS 7, but since it accepts the .pfx format, i convert it first pvk2pfx.exe -pvk MyPersonalCA.pvk -spc MyPersonalCA.cer -pfx MyPersonalCA.pfx After importing MyPersonalCA.pfx, I try to add the https site binding to my Web Site and choose the above as SSL

How do I create client certificates for local testing of two-way authentication over SSL?

Deadly 提交于 2019-12-02 15:53:42
I'm trying to set-up two-way authentication on a web app running on IIS7. The clients are going to mostly be mobile devices and in the first instance I'm trying to get a demo running using a 3rd generation iPad. I thought I'd start with getting it running on my workstation (which is also running IIS) first and then copy the working certificate over the the iPad. However I've hit a wall. I've got as far as having the site running securely over https and have installed a self-signed server certificate, however I can't seem to figure out how to generate a client certificate which I can install on

Android 2.2 SSL Bug with client certificate?

自古美人都是妖i 提交于 2019-12-02 09:32:50
My question: Has anyone successfully authenticated the SSL connection with client certificate in Android 2.1/2.2 with multiple cert chain? The details: I am trying to implement a client certificate authentication for Android platform. There are plenty of discussion already in StackOverflow on how to do it using KeyStore and I am following the standard approach by supplying them to the SSLContext. context.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers() ,null); My client certificate has 3 certificates attached to it forming a cert chain. In Android 2.3+, the SSL