client-certificates

WCF client with Client Certificate and Basic Authentication

随声附和 提交于 2019-12-11 04:33:31
问题 I need to access web services of one of our partners. Their services are secured with both a Client Certificate and Basic Authentication. I'm using WCF with BasicHttpBinding. I am able to hook up the cert using Transport level security. I know the cert is working because I'm no longer getting a 403 error, but I am getting a 401 because I can't pass the credentials along with the transport. From what I can see, I can only have one type of transport security scheme. How can I achieve this?

Impact of SHA1 Certificate Deprecation

浪子不回头ぞ 提交于 2019-12-11 04:23:46
问题 I am currently developing in an environment where EAP-TLS authentication is being used on an embedded WiFi radio. On that radio, we load multiple certificates for authentication (a client certificate, a private key file for the client, and a root CA certificate). I have recently come across this Windows Blog post and a few other posts about the deprecation of the SHA1 hash algorithm for certificate signing. My main question/concern is that the radio that I am using does not support the use of

Using VBA to attach a client certificate to a WinINet HTTPSendRequest

夙愿已清 提交于 2019-12-11 03:27:22
问题 (This is a more expansive discussion of the problem in Identifying correct client certificate for ServerXMLHTTP.SetOption, where I tried a workaround that ran into different problems.) I am attempting to restore a back-end web service capability in an MS Access database after the web server moved to certificate-based STS authentication. I must use VBA. I have the sequence of web calls and expected header and cookie returns ready, but I am unable to attach the client certificate to the request

WCF - certificate not configured properly with HTTP.SYS in the HTTPS case. Works with Charles proxy running

一个人想着一个人 提交于 2019-12-11 00:12:36
问题 This seems to be a common error (there are other posts with similar issues) - however, I have gone through all those posts and MSDN articles ( https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/working-with-certificates ). Scenario: Trying to access a service with an HTTPS end point. Setting the client certificate in code (certificate is loading correctly). As for the Server cert, I have tried both the options below: client.ClientCredentials.ServiceCertificate

Installing client certificate on android programmatically without dialog?

混江龙づ霸主 提交于 2019-12-10 22:27:14
问题 I'm trying to install client certificate on android programmatically, using the following code : Intent clientCertInstall = KeyChain.createInstallIntent(); clientCertInstall.putExtra(KeyChain.EXTRA_PKCS12, clientCert); clientCertInstall.putExtra(KeyChain.EXTRA_NAME, "Client Cert"); MyActivity.this.startActivityForResult(clientCertInstall, REGISTER_CLIENT_CERT); When the installation activity launches, android requests the user to enter password for the certificate (although there is no

Swift 3 UrlSession with client authentication by certificate

孤街醉人 提交于 2019-12-10 12:13:43
问题 I'm using URLSession to make a get request with TLS 1.2 protocol and certificates (which are all self-signed) included in the main bundle. I managed to do the pinning but server also requires a client certificate for authentication so I'm trying to respond to the AuthenticationChallenge with UrlCredential but it's not working: i keep getting NSURLErrorDomain Code=-1206 which is "The server “my_server_domain.it” requires a client certificate." Here is my request: func makeGetRequest(){ let

Exporting Client Cert to Backend with Zuul

大兔子大兔子 提交于 2019-12-10 11:36:37
问题 It is possible to export/forward the client certificate to the backend services using Zuul as a proxy/load balancer? I finally have a working example of zuul with spring-cloud using https and forwarding requests to a secure service on the backend using https as well. Now I need to forward the client's certificate information in addition to using https. You can do this with Apache and Tomcat using the SSLOptions +StdEnvVars/+ExportCertData, which adds the information to the headers, but I don

NSS/JSS: load user imported cert along with PKCS#11 smartcard in Java

浪尽此生 提交于 2019-12-09 18:22:03
问题 Scenario I am working on a Java Swing project, where I must develop a feature of listing certificates for users to choose for authentication via SSL against the server. These certificates must contain the user imported ones in Firefox, and if a smartcard is inserted, those in the card will be listed, too. The environment is Linux/MacOS. In Windows the Internet Explorer handles it all, and what we would like to achieve is much like what happens in Windows: list all certificates, along with

X509Certificate2.Verify() returns false always

此生再无相见时 提交于 2019-12-09 05:56:06
问题 Facing a really strange issue X509Certificate2.Verify() returning false for a valid certificate. Maybe some has already faced this strange scenario before and can shine some light on it. I am using openssl to generate client certificates for testing purposes. I create a Root CA and generate a client certificate based on that Root CA and add the Root CA to its chain. I load the Root CA and the Client Cert to the local certificate store and it seems ok there but when I load it from my NUnit

Forcing ASP.NET WebAPI client to send a client certificate even when no CA match

|▌冷眼眸甩不掉的悲伤 提交于 2019-12-09 05:43:41
问题 I have a specific application that requires the use of client certificates for mutual authentication of HTTPS requests. The server has a flexible certificate validation policy that allows it to accept self-signed client certificates that are not present in the server's certificate store. This is known to work just fine using curl as a client. What I've determined via testing and packet sniffing is that Microsoft's ASP.NET HttpClient tries to be overly smart during the SSL handshake. This