client-certificates

How to send client certificate using HttpWebRequest and IISExpress for debugging

北战南征 提交于 2019-12-21 17:27:10
问题 I have some code for pulling a client certificate from the page request. This is the code in "MyPage.aspx". string someparam = this.Request.Params["someparam"]; if (!String.IsNullOrWhiteSpace(someparam) && this.Page.Request.ClientCertificate.IsPresent) { try { X509Certificate2 x509Cert2 = new X509Certificate2(this.Page.Request.ClientCertificate.Certificate); // // Code for verifying the x509Cert2 // } catch (Exception) { } } Now I want to test the code in Visual Studio in my local environment

How can I configure Simple Framework to require SSL client authentication?

你说的曾经没有我的故事 提交于 2019-12-21 05:33:07
问题 I am writing an HTTP server using the Simple Framework and would like to require clients to present a valid certificate signed by my certificate authority in order to establish a connection. I have the following bare-bones server written. How can I modify this code to require client certificate authentication for all SSL connections? public static void main(String[] args) throws Exception { Container container = createContainer(); Server server = new ContainerServer(container); Connection

How Chrome browser know which client certificate to prompt for a site?

故事扮演 提交于 2019-12-20 12:07:10
问题 I'm setting up certificate authentication for my project using Tomcat. It works ok for command line client such as cURL. I have many client certificates installed in Chrome browser. Some are using to connect to my site, others are used for different purposes and not relate to my project. Every time I connect to my site, Chrome presents a list of client certificates for choosing. These are exactly the certificates that I installed and not others. My questions are: How Chrome knows which client

Can IIS require SSL client certificates without mapping them to a windows user?

萝らか妹 提交于 2019-12-19 10:14:45
问题 I want to be able to map SSL client certificates to ASP.NET Identity users. I would like IIS to do as much of the work as possible (negotiating the client certificate and perhaps validating that it is signed by a trusted CA), but I don't want IIS to map the certificate to a Windows user. The client certificate is passed through to ASP.NET, where it is inspected and mapped to an ASP.NET Identity user, which is turned into a ClaimsPrincipal. So far, the only way I have been able to get IIS to

How do I implement Client Certificate authentication the right way?

不想你离开。 提交于 2019-12-18 13:36:01
问题 WCF is extremely extensible and has a lot of ready-to-use features, however I continue struggling with some topics and the more documentation I read, the more I get confused. I hope to get some answers from the community. Feedback on any assumption or question is extremely welcome. For the record: to really accept a single answer I should divide this post in multiple questions but it would lead to even more confusion. I am pretty sure there are some real WCF experts online who can answer the

Clear SSL client certificate state from JavaScript

丶灬走出姿态 提交于 2019-12-18 03:38:22
问题 I'm using client certificates in SSL sessions to authenticate users, but I'm having a bit of a problem with cached sessions. (I have configured IIS to accept—not require—client certificates.) Normal situation: A user accesses the page that asks for the certificate. The browser launches the certificate selector, the user selects the desired certificate (and enters a PIN if needed), and everything goes forward as it should. Situation where things don't work as expected: A user accesses the page

Connecting to a Web Service using Client Certificate authentication

大城市里の小女人 提交于 2019-12-13 12:08:17
问题 I've been give a .p12 file to connect to a web service over SSL using client certificate authentication. I have this successfully working in PHP, using cURL. These are the options I'm using when perform the request: $headers = array( 'Method: POST', 'Connection: Keep-Alive', 'User-Agent: PHP-SOAP-CURL', 'Content-Type: text/xml; charset=utf-8', 'SOAPAction: "'.$action.'"', ); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $location); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch,

response.Error “Forbidden” in IdentityServer3 Flows.ClientCredentials

十年热恋 提交于 2019-12-13 07:08:29
问题 I'm having a Client in my IdentityServer3 new Client { ClientName = "Client Credentials Flow Client With Certificate", Enabled = true, ClientId = "cc.WithCertificate", Flow = Flows.ClientCredentials, ClientSecrets = new List<Secret> { new Secret { Value = "61B754C541BBCFC6A45A9E9EC5E47D8702B78C29", Type = Constants.SecretTypes.X509CertificateThumbprint, Description = "Client Certificate" }, }, AllowedScopes = new List<string> { "read" } }, In Client Windows Form application I'm using "Client

Client Authentication by Certificate in GAE java

跟風遠走 提交于 2019-12-12 12:20:59
问题 I am writing an application in GAE java which authenticate the user by its certificate . I have created a self signed certificate using keytool at client side. I also enable the https request in google app engine for my application. The flow of application is every simple. User come at home page of application using any browser and then try to access a resource of application. I just authenticate the user is it has valid certificate. I am missing the part that how this certificate that i

Google Chrome Client Certificate Popup

霸气de小男生 提交于 2019-12-12 07:44:24
问题 I'm implementing a mutual authentication for my client in order to solve not having to continually whitelist some of the agencies with a dynamic ip. The process works fine in all browsers that I've tried in the Windows environment (Windows 7). The problem is that there is a popup for every time that the user goes to the site. On most browsers, this is a one time occurrence, when you first go to the site for the day. On Google Chrome, however, the popup occurs on what appears to be every POST