Dynamically request client certificates


user 93353

The web server has settings for requesting client certificates - eg. SSLVerifyClient requireIn Apache, use other settings in IIS etc. If this setting is set, the browser will pop up a dialog asking you to select a certificate.

Is it possible to request certificates dynamically? Namely, I'm really not interested in two-way SSL - however, I would like to ask the user to register his certificate in my application, which will be used in a different context. So I need to let the user choose one of the certificates registered in their browser and then access that certificate in my app. What should I do?

Is this possible?

user 93353

I figured out a way to do this - I have an upload link in my app - this points to a virtual directory with Client Side Authenticationrequired properties . So when user clicks on link - SSL renegotiation is triggered. The browser will pop up a dialog allowing the user to choose from the registered certificates. Once he selects the certificate, the SSL renegotiation happens and I can access the certificate in the application. SSL renegotiation ensures that the user has the private key corresponding to the certificate.

If there are any problems with this method, or if there is a better way to do this, I'd definitely be interested in this.

Also, I'm currently doing this in IIS - but I think something similar should work in most other web servers.

Related


Dynamically request client certificates

user 93353 The web server has settings for requesting client certificates - eg. SSLVerifyClient requireIn Apache, use other settings in IIS etc. If this setting is set, the browser will pop up a dialog asking you to select a certificate. Is it possible to requ

OCSP revocation of client certificates

gtrak: How to manually check certificate revocation status in Java using OCSP, considering only the client's java.security.cert.X509Certificate? I can't see a clear way to do it. Alternatively, I can have tomcat do this for me automatically, how do you know yo

Client certificates and identities in iOS

lipoprotein: I have used SecKeyGeneratePairfunctions to generate private and public keys for a Swift based iOS app . I then generated a "Certificate Signing Request" using the iOS CSR and my server replied with a certificate chain in PEM format. I use the foll

Compare client certificates in go

User1791139: My use case looks like I know the client's public certificate and just want to allow them. I have a go server configured based on gin and TLS where a method has been assigned to the property "VerifyPeerCertificate". The function looks like func cu

OCSP revocation of client certificates

gtrak: How to manually check certificate revocation status in Java using OCSP, considering only the client's java.security.cert.X509Certificate? I can't see a clear way to do it. Alternatively, I can have tomcat do this for me automatically, how do you know yo

Compare client certificates in go

User1791139: My use case looks like I know the client's public certificate and just want to allow them. I have a go server configured based on gin and TLS where a method has been assigned to the property "VerifyPeerCertificate". The function looks like func cu

Client certificates and identities in iOS

lipoprotein: I have used SecKeyGeneratePairfunctions to generate private and public keys for a Swift based iOS app . I then generated a "Certificate Signing Request" using the iOS CSR and my server replied with a certificate chain in PEM format. I use the foll

Android and client certificates

Anthony B Code I've been searching for weeks and can't seem to find an answer anywhere. I am trying to do the following for Android. The code is from a C# app I wrote but am porting it to Android. Web endpoints require certificates to be attached to mutual aut

Android and client certificates

Anthony B Code I've been searching for weeks and can't seem to find an answer anywhere. I am trying to do the following for Android. The code is from a C# app I wrote but am porting it to Android. Web endpoints require certificates to be attached to mutual aut

OCSP revocation of client certificates

gtrak: How to manually check certificate revocation status in Java using OCSP, considering only the client's java.security.cert.X509Certificate? I can't see a clear way to do it. Alternatively, I can have tomcat do this for me automatically, how do you know yo

Compare client certificates in go

User1791139: My use case looks like I know the client's public certificate and just want to allow them. I have a go server configured based on gin and TLS where a method has been assigned to the property "VerifyPeerCertificate". The function looks like func cu

Client certificates and identities in iOS

lipoprotein: I have used SecKeyGeneratePairfunctions to generate private and public keys for a Swift based iOS app . I then generated a "Certificate Signing Request" using the iOS CSR and my server replied with a certificate chain in PEM format. I use the foll

aurelia-fetch-client dynamically creates request headers

Cosmin Ioniță I'm using aurelia-fetch-client to send some data to a web-api (using the register method). headers: Headers; register() { this.headers = new Headers(); this.headers.append("content-type", "application/json; charset=utf-8"); this.h

aurelia-fetch-client dynamically creates request headers

Cosmin Ioniță I'm using aurelia-fetch-client to send some data to a web-api (using the register method). headers: Headers; register() { this.headers = new Headers(); this.headers.append("content-type", "application/json; charset=utf-8"); this.h

aurelia-fetch-client dynamically creates request headers

Cosmin Ioniță I'm using aurelia-fetch-client to send some data to a web-api (using the register method). headers: Headers; register() { this.headers = new Headers(); this.headers.append("content-type", "application/json; charset=utf-8"); this.h

Using Client Certificates in Curl Commands

sunsin1985 : curl command: curl -k -vvvv --request POST --header "Content-Type: application/json" --cert client.pem:password --key key.pem "https://test.com:8443/testing" I am trying to send a client certificate using the Curl command specified above. I would

WSDL client authentication and multiple certificates

other: So I'm having issues with wsdls here, with multiple certificates selected in Java. For example, a smart card has multiple certificates on it for signing, encryption and identification. I have a WSDL that generates code for client auth connections, but a

Using Client Certificates in Alamofire 2.0

Paul On Alamofire 1 and Swift 1.2, I use the following code to make a request and submit my own client certificate: Alamofire.request(.POST, url!, parameters: params, encoding: .JSON) .authenticate(usingCredential: credential) .responseJSON { (request,

Using Client Certificates in Curl Commands

sunsin1985 : curl command: curl -k -vvvv --request POST --header "Content-Type: application/json" --cert client.pem:password --key key.pem "https://test.com:8443/testing" I am trying to send a client certificate using the Curl command specified above. I would

WSDL client authentication and multiple certificates

other: So I'm having issues with wsdls here, with multiple certificates selected in Java. For example, a smart card has multiple certificates on it for signing, encryption and identification. I have a WSDL that generates code for client auth connections, but a

AWS Multiple VPN Client Certificates

Ludo21 South With AWS, I need to make sure I have multiple clients using the VPN network. Each client will use the same server certificate I created earlier. Now, using this document, I managed to set up my own VPN and was able to connect to it using the gener

Client Certificates on Google Cloud Functions

microphone From my google cloud function, I try to request another api that requires a dummy certificate in the test environment. So my server is the client here. Is there a way to send client certificate in google cloud function? I managed to make it work in

Using Client Certificates in Alamofire 2.0

Paul On Alamofire 1 and Swift 1.2, I use the following code to make a request and submit my own client certificate: Alamofire.request(.POST, url!, parameters: params, encoding: .JSON) .authenticate(usingCredential: credential) .responseJSON { (request,

Client certificates in Dotnet Core on Ubuntu

mdavisi All - I wrote a dotnet core API set which works flawlessly on Windows. On Ubuntu 14.04 everything works fine except for one SOAP request to a vendor that uses client certificates for authentication. The request always times out. Netstat trace shows tha

Filter client certificates (like browsers)

Mika Hoover I have a smart card reader. When I try to access a website that accepts client certificates, the browser presents me with a list of 2 or 3 client certificates. All of these certificate options are tied closely to the card used on my machine. When I

Client Certificates on Google Cloud Functions

microphone From my google cloud function, I try to request another api that requires a dummy certificate in the test environment. So my server is the client here. Is there a way to send client certificate in google cloud function? I managed to make it work in

AWS Multiple VPN Client Certificates

Ludo21 South With AWS, I need to make sure I have multiple clients using the VPN network. Each client will use the same server certificate I created earlier. Now, using this document, I managed to set up my own VPN and was able to connect to it using the gener

How do client certificates work?

Sunil I'm working with a REST service provider and they want me to use the client certificate they provide when making HTTP calls. How do client certificates implement authentication? If someone has a copy of the client certificate, then they can also authenti

Generate client certificates for TLS asterisks

Duckett I'm trying to enable TLS b/w (voip server and client (Android device) powered by asterisk) following the guide mentioned here . Used to generate client certificates ./ast_tls_cert -m client -c /etc/asterisk/keys/ca.crt -k /etc/asterisk/keys/ca.key -C p