Re: Client certificate problem

From: Felix Planjer (felix.planjer_at_yellowred.nl)
Date: 12/14/04 

Date: Tue, 14 Dec 2004 12:21:09 +0100

Thanks fot hte response.

I checked the certificate and it is in the personal section of the
certificates. It also has the private key, and in the certificate path,
it has the same CA as the server certificate has. Still doesn't work
though.

One other thing that comes to mind that I should have included in my
original post, is that the webserver on which the client certificate
does work, is on the same machine as the CA. Would this have any influence?

What else can/should I check?

regards, Felix

Miha Pihler wrote:
> Hi Felix,
>
> If you open IE and go to Tools -> Options -> Content and click on
> Certificates button, do you see any certificates under personal tab here? If
> you click on the certificate and select View. Does it state that you have
> key that corresponds to this certificate?
> http://freeweb.siol.net/mpihler/cert.jpg
>
> These are some of prerequisites for displaying user (client) certificate in
> the list. Another thing that certificate must have is correct purpose
> (client authentication).
>
> Mike
>
> "Felix Planjer" <felix.planjer@yellowred.nl> wrote in message
> news:unwTLRc4EHA.3388@TK2MSFTNGP15.phx.gbl...
>
>>Hi,
>>
>>We're developing an application that will run on IIS 5, with server and
>>client certificates. I have some issues setting this up.
>>
>>We have our own Certificate Authority installen (seperate box) and
>>generated a server certifictae for our webserver. HTTPS works fine.
>>
>>Then, we generated a client certificate (on the same CA) and installed
>>this on the client. Whe we set the webserver to 'require client
>>certificate' we allways get the error 'The page requires a client
>>certificate'. Also, when I set IE to display a box with client certs, the
>>box is empty.
>>
>>When I go to a different server, which has a server certificate generated
>>from the same CA, the installed client certificate works fine.
>>
>>Can anyone shed some light on the problem we are facing here?
>>
>>Also, I'd like to know how the browser selects the client certificate that
>>has to be send to the server?
>>
>>regards, Felix
>
>
>