Re: How do we get the private key to do digital signature?

On Apr 9, 8:26 pm, "Mitch Gallant" <jensig...@xxxxxxxxxxxxxxxx> wrote:

Yes, but read the default settings on SetClientCertificate in the docs
there.
If IE finds more than one valid cert (for SSL authentication purposes) it
pops a dialog.
You will need to pop a dialog on your client, or else code searching his MY
certs store for one with the necessary client-authenticadtion attributes and
if more than one, pop a vb dialog on them.
You have some more coding to do to achieve what IE does.
- Mitch-

The popup dialog shown at the following URL

http://farm1.static.flickr.com/167/442962234_ab4a756b8c_o.png

is exactly on the client side with IE. So, I think you are suggesting
that I do

(1) initiate the https request from vbs like in the example you showed
as follows:

' Open an HTTP connection.
HttpReq.Open "GET", "https://somesecureurl/";, False

This will presumably prevent IE from popping up the dialog box.

(2) then in my vbs code, I search the key store, and find the
corresponding client certificate and submit it. Well, since the user
will enter his email on my login page, and the certificate contains
user email address, I should be able to locate client cert given this
info.

In other words, your suggestion is that we select the client cert
*for* the end user from the given subject info (such as the email
address), and the end user is not given the option to select his
cert. This way, we don't have to worry about polling the IE popup
dialog box, which you say is impossible.

Am I getting your idea?

.

Relevant Pages

  • Re: Disable requesting client certificate when running in SSL
    ... I assigned my cert out of a W2K3 Enterprise CA for the domain ... to impersonate ADAM users in Extranet usage). ... > to have it automatically disable the client certificate ...
    (microsoft.public.windows.server.active_directory)
  • Re: IIS website - only allow users with client cert from our CA. P
    ... Rootyou wish to permit certificates issued from for access to your site. ... our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS website - only allow users with client cert from our CA. Possi
    ... > Why does IIS allow me to see my website when it doesn't have ... > our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • RE: Certificate logon on Unix
    ... I don't know of any package but there is prolly one out there you should ... The good news is that getting fulle client ... and server side authentication is pretty easy so it will work as a quick ... setup your CA and make the root cert Pbk available to everyone. ...
    (Security-Basics)
  • Re: Radius Server
    ... > so I'm guessing the client needs the Server Certificate, ... > export it from the server and import it to the client. ... >> But if you deployed EAP-TLS, you need a server cert and a client ...
    (microsoft.public.windows.server.networking)