Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Internet Explorer / IE 6.x / August 2006

Tip: Looking for answers? Try searching our database.

Resource Specific Client Authentication doesn't work

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Senthil Kumar - 14 Aug 2006 13:38 GMT
IE 6.0 & IE 7.0 Beta 3 does not send client certificate, if the server
requests for one  on a  particular SSL Connection, to enable accessing of a
specific resource.
At the most, a popup is thrown asking for the user to select the client
certificate to be sent, but nothing is sent on the wire.
Steve Cook - 29 Aug 2006 20:48 GMT
When the popup opens are any certificates displayed in it? If not, the user
has no client certificates meeting the server's requirements.

> IE 6.0 & IE 7.0 Beta 3 does not send client certificate, if the server
> requests for one  on a  particular SSL Connection, to enable accessing of a
> specific resource.
> At the most, a popup is thrown asking for the user to select the client
> certificate to be sent, but nothing is sent on the wire.
Senthil Kumar - 30 Aug 2006 18:35 GMT
YES. Certificates are dispalyed when the pop up opens. I have exported a user
certificate. But then even before the selection is made, the browser closes
the connection with the Server. That's really weird.

> When the popup opens are any certificates displayed in it? If not, the user
> has no client certificates meeting the server's requirements.
[quoted text clipped - 4 lines]
> > At the most, a popup is thrown asking for the user to select the client
> > certificate to be sent, but nothing is sent on the wire.
Steve Cook - 30 Aug 2006 18:53 GMT
So you access an SSL page requiring a client certificate, the certificate
window opens and displays certificates from which to choose, and the browser
crashes without any displayed error before you can select a certificate to
present?

> YES. Certificates are dispalyed when the pop up opens. I have exported a user
> certificate. But then even before the selection is made, the browser closes
[quoted text clipped - 8 lines]
> > > At the most, a popup is thrown asking for the user to select the client
> > > certificate to be sent, but nothing is sent on the wire.
Senthil Kumar - 31 Aug 2006 15:47 GMT
Browser doesn't crash. But the connection in which the Hello Request was sent
from the Server to Client is closed by IE even before the certificate
selection is done.

A new SSL connection is generated by IE when the client certificate is
selected and submitted. But then the certificate is not sent in the new SSL
connection.

> So you access an SSL page requiring a client certificate, the certificate
> window opens and displays certificates from which to choose, and the browser
[quoted text clipped - 13 lines]
> > > > At the most, a popup is thrown asking for the user to select the client
> > > > certificate to be sent, but nothing is sent on the wire.
Steve Cook - 31 Aug 2006 22:38 GMT
That sounds like a server-side issue to me. Do you get the same behavior
pointing the browser to an unrelated system requiring client certificates?
(You might have to set up a test server that does nothing but require a
client cert and then display a simple page upon success. If you do this, make
sure the test system is a different physical box.)

> Browser doesn't crash. But the connection in which the Hello Request was sent
> from the Server to Client is closed by IE even before the certificate
[quoted text clipped - 21 lines]
> > > > > At the most, a popup is thrown asking for the user to select the client
> > > > > certificate to be sent, but nothing is sent on the wire.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.