Request.ClientCerficate
in [ASP]
|
From: Meels Lilbok on 26 Feb 2008 09:44 Hi I have a problem with Request.ClientCerficate IIS 6. ASP solution,Win2003R2 Whe i call Request.ClientCerficate it does to nothing. All settings , certifcates aso. are OK. because on another server same solution works perfectly! No errors, nothing., it just does not work. Any ideas? Best regards; Meelis
From: Andy on 26 Feb 2008 12:14 How and where are you requesting the client certificate? Is this through program code (ie VB.NET), a properties sheet (from what application), or because of a call to a website from inside of internet explorer? Client certificates identify client computers to server computers under the Kerberos scheme. Does your server need to have kerberos setup? Its hard to tell what's wrong without really knowing what you are trying to do...because there are so many things you can do with certificates. Andy
From: Meelis Lilbok on 26 Feb 2008 12:53 Hi Andy Im requesting client certificate trough ASP(old asp) code. ASP page runs under IIS 6.Server certificate is ok, and webpage is set to accept client certificates. Testing with Internet Explorer 6 and 7. Client certificate is read from Estonian National ID Card. testing with code; <% For Each strKey in Request.ClientCertificate Response.Write strkey & " = " & Request.ClientCertificate(strkey) & "<BR>" Next %> On another server all works fine, when i call this asp page, "select a digital certificate" window pops up even when no id-card is inserted. On this problematic server it does not work. Meelis "Andy" <anedza(a)infotek-consulting.com> kirjutas s�numis news: 3c2f5d4e-afc5-480a-8c63-4cc06cca5469(a)72g2000hsu.googlegroups.com... > How and where are you requesting the client certificate? Is this > through program code (ie VB.NET), a properties sheet (from what > application), or because of a call to a website from inside of > internet explorer? > > Client certificates identify client computers to server computers > under the Kerberos scheme. Does your server need to have kerberos > setup? > > Its hard to tell what's wrong without really knowing what you are > trying to do...because there are so many things you can do with > certificates. > > Andy
From: Andy on 26 Feb 2008 14:41 In your code, you aren't checking to see if any certificates were received at all (by checking for a count before you go into the for each loop). If the count is zero, you should display an error message stating no certificates were received. <% For Each strKey in Request.ClientCertificate Response.Write strkey & " = " & Request.ClientCertificate(strkey) & "<BR>" Next %> Because you don't crash, your results indicate that no certificates have been sent by the client when it issued a request to your server. Check your client browser security settings to ensure that the browser isn't stopping this information from being sent. Also, should the in clause of your for each be Request.ClientCertificates, which is the actual collection of the certificates sent? Andy
From: Meels Lilbok on 27 Feb 2008 02:02
Hi Andy Yes, i'm not checking Count beacuse i wanted to get error message. But there is no error, Count is always 0. As i sayd, its not browser related problem, because on another server all works fine when i call this asp page from IE. Meelis "Andy" <anedza(a)infotek-consulting.com> kirjutas s�numis news: 3c631a9f-477e-4acf-b8c3-4459fc146c0b(a)o10g2000hsf.googlegroups.com... > In your code, you aren't checking to see if any certificates were > received at all (by checking for a count before you go into the for > each loop). If the count is zero, you should display an error message > stating no certificates were received. > > <% > For Each strKey in Request.ClientCertificate > Response.Write strkey & " = " & Request.ClientCertificate(strkey) & > "<BR>" > Next > %> > > Because you don't crash, your results indicate that no certificates > have been sent by the client when it issued a request to your server. > Check your client browser security settings to ensure that the browser > isn't stopping this information from being sent. > > Also, should the in clause of your for each be > Request.ClientCertificates, which is the actual collection of the > certificates sent? > > Andy |