c# - Use certificate when issuer is not is X509Store trusted roots for client authentication using Microsoft .NET framework -


while working on question, identified problem different stated, changing title , description

i'm trying authenticate myself against webservice using client certificate. using webrequest purpose. need use self-signed certificate, without registering in windows x509 trusted root store.

the way know if client certificate presented or not examining request object on server

i tried use code this question guidance. doesn't work on .net. here code:

            var certificate = new x509certificate2(properties.resources.mycert);             httpwebrequest req = (httpwebrequest)webrequest.create(host);             req.clientcertificates.add(certificate);             webresponse resp = req.getresponse();             var stream = resp.getresponsestream();

what observe though req.clientcertificates contain certificate valid private key, certificate never presented server. no indication webclient certificate not used during handshake.

if put certificate "trusted root", code work (even when certificate not in "personal").

my questions are:

  1. since certificate usable when it's placed in "trusted root", assume due policy or of kind. possible coerce .net ignore policy settings , use supplied client certificate during tls negotiation?

  2. if abovementioned coercion not possible, there call tell me ahead of time, certificate use not usable, , ignored? alternatively, if such call not available, make webclient fail indicating certificate error, instead of silently skipping over?

note: aware configuring certificates described microsoft work. not looking for. don't want register potentially insecure certificate in trusted root, because potentially security hazard. want use cert on client without registering in store, or @ least exception indicating certificate cannot used. realize there can multiple reasons why certificate cannot used session, there must exception, or @ least sort of indication on client side cannot use specified cert. instead, client doesn't present one.

when instantiate x509certificate2, privatekey property set? if null, missing private key, meaning ssl/tls client unable authenticate you.

make sure loading certificate pfx file (or similar) instead of cer. these contain private key, too. password protected purpose. see how retrieve certificates pfx file c#? more info.


-

Comments

Post a Comment

Popular posts from this blog

html - Sizing a high-res image (~8MB) to display entirely in a small div (circular, diameter 100px) -

first of all, thank being patient know simple question more couple of weeks' experience figure out. i've seen folks persevere , helpful on here , hope you're willing me. here fiddle: http://jsfiddle.net/65uzf/ here 1 of places searched answers on here: ( vertically center image thumbnails fix-sized div ) tried solutions on there , didn't work out me. i've searched ~4 or 5 others, , been unsuccessful those, too. what want take large image (what linked background-image #ysypic , #tabpic divs) , display thumbnail version of image in confines of divs have set it. is, using background properties have laid out in css, portion of image displays inside of circular divs. without these properties, display defaults smaller section of image [presumably pi*(50^2) area in top left] terrible resolution. i not care if entire image doesn't display inside of circles (it won't, given difference in shape), , overflow not being displayed fine. want able see figu
Read more

java - IntelliJ - No such instance method -

using intellij's 12 ultimate, i'm running following code in debugger: java import play.api.libs.json.jsvalue; public class foo { ... public jsvalue tojson() { ... } public class fooexample { ... foo foo = new foo(); system.out.println("...); //<-- breakpoint at breakpoint, right-clicked source code , picked "evaluate expression," typing in: foo.tojson() . but following error showed up: no such instance method: play.api.libs.json.jsvalue$class.com.foo.foo.tojson () am doing wrong? foo#tojson calls scala code, if matters. edit had breakpoint after instantiation of foo. downvoted it, deserved it. edit my answer no longer valid after op modified question (i.e. moved breakpoint actual is).. a breakpoint hit before line executed. in case foo has not yet been declared or instantiated (i.e. foo constructor has not yet been called). you'll need put breakpoint @ next line (or step on current line) if want evaluate foo .
Read more

identifier - Is it possible for an html5 document to have two ids? -

i wondering if html5 element can have 2 ids, this: <button id="thing1" id="thing2" name="button1" onclick="change()">click here</button> or this: <button id="thing1, thing2" name="button1" onclick="change()">click here</button> also, if 1 of ids said 1 thing, , other id said thing, 1 used? tl;dr : no. in versions of html, each element can have 1 id. see the spec : the id attribute specifies element's unique identifier (id). [dom] the value must unique amongst ids in element's home subtree , must contain @ least 1 character. the value must not contain space characters. note: there no other restrictions on form id can take; in particular, ids can consist of digits, start digit, start underscore, consist of punctuation , etc. note: element's unique identifier can used variety of purposes, notably way link specific parts of document usin
Read more