Re: Is it possible to force IIS to accept any client ssl certificate?

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 01/13/04 

Date: Tue, 13 Jan 2004 05:18:36 -0800

No, the client certs must be trusted and map to an account through one of
the acceptable methods 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Tester" <test> wrote in message
news:%23dIujGX2DHA.1908@TK2MSFTNGP10.phx.gbl...
> Hello all,
>
> Does anyone know if it is possible to tell IIS to accept any client
> certificate (even self signed and not trusted). We have to do custom
> authentication of legacy system, which uses self signed certificates
without
> "client" usage specified in certificate.
>
> Alternatively is it possible to intercept invalid certificate through
ISAPI
> filter and tell IIS to accept the connection and get a hold of client
> certificate?
>
> Thanks for any advise
>
>
>

Relevant Pages

  • Re: security header is not present in the incoming message
    ... Similar problem appears when I run my client directly under IIS instead of under ASP.NET Development Server. ... There are no certificates in the certificate store that match the find value of 'CN=WSE2QuickStartServer'. ... 'Hello World with certificate policy. ...
    (microsoft.public.dotnet.security)
  • RE: Authorization issues with WSE 3.0 running on IIS 5.0
    ... The certificate is stored in your user profile, while the client application ... Change the policy to look in the "Local Computer / Personal" store for the ... > on IIS. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Confused about SSL/Client Authentication
    ... that we want the user name off of the client cert to appear in the IIS ... > My certificate might contain an OU field that says I ... >> client authentication, in general. ...
    (comp.security.misc)
  • Re: Obtaining an SSL (test) certificate
    ... Typical "client certificates" which can be used for client authentication ... You can generate your own certificate for this purpose automatically using ... installation has nothing to do with the IIS server. ... with a "choose one of your certs to present to server". ...
    (microsoft.public.platformsdk.security)
  • Re: Obtaining an SSL (test) certificate
    ... Typical "client certificates" which can be used for client authentication ... You can generate your own certificate for this purpose automatically using ... installation has nothing to do with the IIS server. ... with a "choose one of your certs to present to server". ...
    (microsoft.public.dotnet.security)
Loading