How to request the ssl certificate from the IIS 7.5 client

3

How to request client SSL certificate in an ASP.NET MVC 5 application?

I've enabled SSL on my site using IIS 7.5 but it tries to authenticate the user using the client's certificate but I do not want to authenticate users I just want to retrieve some certificate information.

    
asked by anonymous 05.08.2014 / 21:11

1 answer

1

The correct option is even Require . Otherwise, the browser will not prompt the user to select a certificate. However, it is not possible to intercept certificate validation in ASP.Net. You need to create a native module (in C ++) and configure it in your application. This article has more details . In it, the code is shown to completely ignore certificate validation; I imagine that's what you want.

If you are going to use self-signed client certificates, there is another detail. The server sends the root certificates that it believes to be trusted, and it is common for the browser to allow the user to select only those certificates belonging to the strings accepted by the server. I mean, the browser will not show the self-signed certificate. You can modify the server configuration so that it does not send the list of trusted roots (see Method 3 - just create one value in the registry).

    
07.08.2014 / 00:12