News  [SoftwareSite

Latest News
Older News
RSS Feed
 
Complete Projects
Useful Classes
Top Downloads
Message Board
AllAPI.net
 
Send Comments
Software License
Mentalis.org Buttons
Donate
 
Forums -> Security Library Forum
 
client authentication  
by nasko [k4fr0314 at kiss dot si]
posted on 2004/07/24

i would like client to authenticate itself with a certificate.

i have changed webserver sample and added code below.

options.CommonName = "10.8.20.126";
options.VerificationType = CredentialVerification.Manual;
options.Flags = SecurityFlags.MutualAuthentication;
options.Verifier = new CertVerifyEventHandler(OnVerify);

OnVerify function is the same as in the webclient sample.

i'm using server.pfx certificate included in webserver sample.

when i connect to server (https://localhost/) with IE i recieve an
empty certificate in OnVerify function.

IE does not prompt a window for choosing client certificate. Insted it prompts security aler window of server certificate.

if i comment code in OnVerify function(verify is success) server correct shows mentalis webpage.

what i'm doing wrong? how can i do IE to prompt for client certificate to use?

thnx

by nasko [k4fr0314 at kiss dot si]
posted on 2004/07/30

i found out, that empty certificate is send from IE when i use SSL3&TLS1 protocol. When i use only SSL3, exception KeyExchange before Certificate message is shown.
Why does IE in this case skip Certificate message in SSL3 protocol?
Why does IE automaticly sends empty certificate? Maybe becouse i don't have any regular client certificate? I would like IE to shown dialog box client authentication.

 

Copyright © 2002-2007, The Mentalis.org Team. All rights reserved.
This site is located at http://www.mentalis.org/
Send comments to the webmaster.