mardi 4 août 2015

Retrieve client certificate from a smart card without IIS validation

I need to authenticate my WEB users by their smart card certificate. I am using IIS with SSL Settings: "Require SSL" and with "Accept" client certificate. This part works fine, the user is trying to enter the WEB page (.aspx) and being asked to choose its certificate and to enter a PIN code. In the next step the browser sends the certificate to the server and the IIS validates it. I don't want IIS to validate the certificate, I m u s t validate it myself. I am using the IIS mechanism to retrieve the client certificate because I can't use ActiveX or JAVA Applets.

How can I bypass the IIS certificate validation and yet get the client certificate from the smart card?



via Chebli Mohamed

Aucun commentaire:

Enregistrer un commentaire