Re: PKI certificates

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/23/04


Date: Fri, 23 Jul 2004 11:25:36 GMT

I am not familiar with the DOD in question, but a server, such as a web server, can
require a certificate before a session is established if they require client
authentication. Public web servers using ssl for instance generally do not require a
client certificate. If a client certificate is needed, the user will need to request
one from a trusted Certificate Authority. Certificate Authorities will need some sort
of credentials to issue a certificate in order to protect the integrity of PKI. ---
Steve

"DLH" <anonymous@discussions.microsoft.com> wrote in message
news:28c701c47092$1181ec80$a401280a@phx.gbl...
> When a client with no DoD PKI certificate attempts to talk
> to a Server PKI DoD Certificated computer with the Sever
> accept the client and issue a certificate or will it
> reject the client? If the client is rejected how can it
> talk to the Server?



Relevant Pages

  • Re: Need for encryption in WSE 3.0 if using SS-avoid man-in-middle
    ... SSL only validates you are talking to a SSL certified server; ... They can simply edit the URL the client program ... can be done by using a X.509 certificate on both ends, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: LDP client authentication fails
    ... I got the LDP working with LDAP server under server client authentication ... I did not installed the certificate in pfx format .. ... Client cert auth won't work without that. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SSL & Man In the Middle Attack
    ... >> it possible for the middle man to intercept all messages from server to me ... > server sends client a signed message along with a digital certificate. ... > client generates a random secret key, ...
    (comp.security.misc)
  • Re: activesync issue
    ... On the SBS 2003 Server open the Server Management console. ... On the "Web Server Certificate" page, choose to create a new Web server ... Install the new certificate which created in above step on mobile device: ... Access to browse the Exchange Server 2003 client after you install ...
    (microsoft.public.windows.server.sbs)
  • Re: Need for encryption in WSE 3.0 if using SS-avoid man-in-middle
    ... order to detect we are connected to the wrong server (even though its SSL ... certificate is OK and valid by Verisign); we would need a client certificate. ... this can be detected by SSL/HTTPS client in ...
    (microsoft.public.dotnet.framework.aspnet.security)

Quantcast