Request.ClientCertificate()
From: Mike (q@w.e)
Date: 01/29/03
- Next message: Bassel Tabbara [MS]: "RE: Config error using domain user for ASP.NET worker process"
- Previous message: Michael: "Config error using domain user for ASP.NET worker process"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Mike" <q@w.e> Date: Wed, 29 Jan 2003 05:09:01 -0800
I want to make the authentication for a web application
using smart cards.
I use https so I set IIS to require a certificate every
time the user wants to login!
This way only the users that have certificates (on their
smart cards) will have access to the web application. Now
the application is secured, but I want more. Each user
wants to see in the application private information (he
doesn't want others users to see his info) so after they
login I have to know who logged in. As my application is
an ASP.NET one I use Request.ClientCertificate () method
to get the certificate that the client browser sent to
the IIS. After I call this function I know the user id,
public key and some more information. Now I need to
search the user and associated public key in a database
on the server where the certificates are stored. Where
can I find this database and how can I interrogate it? Do
you think this is a good solution (to use
Request.ClientCertificate () to see who logged in and
then search the retrieved name and public key in a
database)?
Thanks!
- Next message: Bassel Tabbara [MS]: "RE: Config error using domain user for ASP.NET worker process"
- Previous message: Michael: "Config error using domain user for ASP.NET worker process"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
