Programmatic authentication of Server SSL certificate

From: Andreas Di Palma (adipalma@sunamerica.com)
Date: 07/01/02 

From: "Andreas Di Palma" <adipalma@sunamerica.com>
Date: Mon, 1 Jul 2002 11:25:20 -0700

Hello everyone,

I have a question concerning programmatic authentication
of Server SSL certificates.

Summary:
Basically I need to call a server from another server
using HTTPS with the HTTPWebRequest object, and verify
that the server I am calling has a valid SSL Certificate.

Scenario:

1. User logs-on to ServerA through a regular aspx page.
2. ServerA authenticates User, and then redirects to
ServerB (https request to a server on another URL).
3. ServerB needs additional information from ServerA and
needs to get it programmatically using the HttpWebRequest
object (that is a programmatic call to a server through
HTTPS, without the use of a browser).
4. ServerB receives the response from ServerA and then
serves the page to the User's browser.

In step 3, ServerB (the requesting server), should also
verify that ServerA's certificate is authentic, thus
mimiking what a browser would do in a handshake.

Is this possible in the .Net framework? Any Examples?

Thank you very much for your help.
Andreas.

Relevant Pages

  • Re: SSL security authorization?
    ... > I see that we are talking about a kind of interactive authentication ... > (Most of the time the actual HTTPS url is masked ... > the secure server.) ... either urllib or urllib2. ...
    (comp.lang.python)
  • Repeated Failure Audits - related to RPC over HTTPS
    ... for OWA and one is dedicated for RPC over HTTPS. ... select the check box next to Basic authentication (password is sent in clear ... front-end server, but they persist on the back-end server. ...
    (microsoft.public.exchange.admin)
  • Re: Problems with tcl SOAP and https via proxy
    ... server .. ... I beleive that that the problem may be with authentication to the https ... The authentication is to the webservice, not the proxy server. ...
    (comp.lang.tcl)
  • Re: Securing Data Transfer
    ... You may want to take a look at a file upload apple that will send the ... files over https to your FTP server. ... And the https tunneling servlet UnlimitedFTP.Secure - ... Like the authentication schemes available to you, ...
    (comp.security.misc)
  • Re: RWW with no https
    ... Speaking about MS IIS as a web server, in HTTP, one can run multiple ... "host headers" and run all sites on the default port 80. ... to workstations, runs on port 4125, which is dynamically opened by the SBS ... HTTP why cant you do the same with HTTPS? ...
    (microsoft.public.windows.server.sbs)
Quantcast