httpWebRequest not sending client Certificate

[Marvin]

my asp.net app is posting to another webpage using httpwebRequest &
x509Certificate s and in return the certificate's name used for the posting is
sent back. But instead of getting information about the cert returned I'd get
no information message.

I know my certificate is valid because when I manually type the address my
app is posting to in IE it would return the client certificate's name used in
my users personal store.

So basically, HttpwebRequest is not sending the client certificate.

I have the cert installed in local_machine\p ersonal store in CA in the
trusted root authority.

I'm also using window server 2003

code that POSTs:

void SendTestXML2(ob ject sender, System.EventArg s e)
{
string XMLRequest = "";
System.Net.Serv icePointManager .CertificatePol icy = new MyPolicy();
try

{

string loginUrl =
"https://aestheticpc.com/qbConn/CertCheck/CertCheckaspx.a spx"; XMLRequest =
buildXML();
X509Certificate cert =
X509Certificate .CreateFromCert File("ClientCer tDER2.cer");
HttpWebRequest wr = (HttpWebRequest ) WebRequest.Crea te(loginUrl);
wr.ClientCertif icates.Add(cert );
wr.Method = "POST";
wr.KeepAlive = false;
wr.ContentType = "applicatio n/x-qbxml";
wr.ContentLengt h = XMLRequest.Leng th;

// send xml data
StreamWriter SendStream;
SendStream = new StreamWriter(wr .GetRequestStre am());

SendStream.Writ e(XMLRequest);
SendStream.Flus h();
SendStream.Clos e();
HttpWebResponse WebResp = (HttpWebRespons e) wr.GetResponse( );
string res = "";
using (StreamReader sr = new
StreamReader(We bResp.GetRespon seStream()) )
{

res = sr.ReadToEnd();

sr.Close();

}

Output.Text = res.ToString();
Output.Text += cert.GetName();
WebResp.Close() ;

}

catch(Exception err)

{

Response.Write( err.ToString() + "<br>");
Response.Write( XMLRequest.ToSt ring());

}

}

code that Responds:

Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArg s)

Dim cs As HttpClientCerti ficate = Request.ClientC ertificate
If cs.IsPresent Then
'Get the Organization (O) field from the Subject section.
Response.Write( "Cert subject: " & cs.Get("Subject O"))
Else
Response.Write( "No certificate was found.")
End If
End Sub

[Jens Christian Mikkelsen]

"Marvin" <Ma****@discuss ions.microsoft. com> skrev i en meddelelse
news:A3******** *************** ***********@mic rosoft.com...

my asp.net app is posting to another webpage using httpwebRequest &
x509Certificate s and in return the certificate's name used for the posting is sent back. But instead of getting information about the cert returned I'd get no information message.

This is an ancient ASP.NET bug:

FIX: ASP.NET Web application cannot deliver a client certificate to a secure
Web site
http://support.microsoft.com/?kbid=817854

Unfortunately this involves getting your hands on the ASP.NET 1.1 June 2003
(Yes, 2003 Virginia!!!) Hotfix Rollup Package:

http://support.microsoft.com/default.aspx?kbid=821156

As there is no servicepack for 1.1, you will need to get this hotfix from
Microsoft Product Support Services. It cannot be downloaded from
microsoft.com. Alternatively you could wait for 2.0. :-)

For Windows 2003, note that you should install the OCM hotfix package
*INSTEAD OF* the Windows Installer package.

Jens

--
Jens Christian Mikkelsen
http://www.jcmikkelsen.dk