Browse by Tags

30 december 2006
The need for Trusted Root Certificate Authorities

A web server will send the public key of its server certificate to set up a SSL connection with the client. The client checks whether the certificate is still a valid in this point in time the name of the server matches the one in the certificate the certificate has been issued by an authority it trusts... Read More...

1 comment(s)

Filed under: ASP.NET 1.1, ASP.NET 2.0, Security

29 december 2006
Request and install a client certificate on the browsing computer

Browsers will need to have client certificates installed before any web server can receive them for authentication and authorization. Certificate Services can issue these certificates manually by a user, administrator or even programmatically. Let's assume that your users need to acquire a certificate... Read More...

1 comment(s)

Filed under: ASP.NET 1.1, ASP.NET 2.0, Security

23 december 2006
Configure IIS for client certificates

Now that the web server is prepared with a server certificate you can continue with client certificates. By default IIS will ignore client certificates. You need to change some settings. Go to the properties of the particular web application in Internet Services Manager: There should be an active Edit... Read More...

1 comment(s)

Filed under: ASP.NET 1.1, ASP.NET 2.0, Security

22 december 2006
Using client certificates to authenticate web browsers

ASP and ASP.NET have a pretty easy mechanism to work with client certificates that a browser has handed to the web server. All it takes is this little piece of code: Response.Write(Request.ClientCertificate[ "Issuer" ]); plus or minus the square brackets and semi-colon. This will read and print the value... Read More...

no comments

Filed under: ASP.NET 1.1, ASP.NET 2.0, Security