HttpWebRequest and client certs?

[EMonaco]

Is there any way to programmaticall y select a particular client certificate
and associate it with an HttpWebRequest instance? I know using WinINet this
was possible.
Erin.

[Trebek]

Erin,

Sure.

System.Security .Cryptography.X 509Certificates .X509Certificat e cert =

System.Security .Cryptography.X 509Certificates .X509Certificat e.CreateFromCer t
File(@certPath) ;
ServicePointMan ager.Certificat ePolicy = new CertPolicy();
HttpWebRequest tuReq = (HttpWebRequest )WebRequest.Cre ate(addr + "?" + TU);
tuReq.ClientCer tificates.Add(c ert);

tuReq.ContentTy pe = "applicatio n/x-www-form-urlencoded";

tuReq.Method = "GET";

Make sure you have a class (either your class or another) that implements
ICertificatePol icy or your app will hang because of the untrusted cert
issue.

EX:

class CertPolicy: ICertificatePol icy

{

public bool CheckValidation Result(ServiceP oint srvPoint, X509Certificate
certificate,

WebRequest request, int certificateProb lem)

{

return true;

}

}

Alex



"EMonaco" <er********@nos pam.net> wrote in message
news:Oo******** ******@tk2msftn gp13.phx.gbl...

Is there any way to programmaticall y select a particular client certificate and associate it with an HttpWebRequest instance? I know using WinINet this was possible.
Erin.

[EMonaco]

Trebek,

Thanks, was able to dig up an ASP.NET example code and came up with

httpreq = (HttpWebRequest ) HttpWebRequest. Create(this.tbU RL.Text);

httpreq.Method = sMethod;
// Has a client certificate file been given?

if(this.tbCERTP ATH.Text.Length >0)

{

try

{

httpreq.ClientC ertificates.Add (System.Securit y.Cryptography. X509Certificate s
..X509Certifica te.CreateFromCe rtFile(this.tbC ERTPATH.Text));

}

catch(System.Ex ception pe)

{

System.Diagnost ics.Debug.Write Line(pe.ToStrin g());

}

}

I assume I need an implemented ICertificatePol icy if the server certificate
is not trusted on the given client?

Erin.

"Trebek" <tr****@inthefo rmofaquestion.c om> wrote in message
news:3f******** *************** @nnrp.fuse.net. ..

Erin,

Sure.

System.Security .Cryptography.X 509Certificates .X509Certificat e cert =

System.Security .Cryptography.X 509Certificates .X509Certificat e.CreateFromCer t File(@certPath) ;
ServicePointMan ager.Certificat ePolicy = new CertPolicy();
HttpWebRequest tuReq = (HttpWebRequest )WebRequest.Cre ate(addr + "?" + TU);
tuReq.ClientCer tificates.Add(c ert);

tuReq.ContentTy pe = "applicatio n/x-www-form-urlencoded";

tuReq.Method = "GET";

Make sure you have a class (either your class or another) that implements
ICertificatePol icy or your app will hang because of the untrusted cert
issue.

EX:

class CertPolicy: ICertificatePol icy

{

public bool CheckValidation Result(ServiceP oint srvPoint, X509Certificate
certificate,

WebRequest request, int certificateProb lem)

{

return true;

}

}

Alex



"EMonaco" <er********@nos pam.net> wrote in message
news:Oo******** ******@tk2msftn gp13.phx.gbl...

Is there any way to programmaticall y select a particular client

certificate

and associate it with an HttpWebRequest instance? I know using WinINet

this

was possible.
Erin.

[Trebek]

Yes, even if the client IS trusted, I suggest doing it because the in the
early releases (Beta and maybe 1.0 - can't remember), this was buggy and
never really worked as intended.

Alex

"EMonaco" <er********@nos pam.net> wrote in message
news:%2******** *******@TK2MSFT NGP10.phx.gbl.. .

Trebek,

Thanks, was able to dig up an ASP.NET example code and came up with

httpreq = (HttpWebRequest ) HttpWebRequest. Create(this.tbU RL.Text);

httpreq.Method = sMethod;
// Has a client certificate file been given?

if(this.tbCERTP ATH.Text.Length >0)

{

try

{

httpreq.ClientC ertificates.Add (System.Securit y.Cryptography. X509Certificate s .X509Certificat e.CreateFromCer tFile(this.tbCE RTPATH.Text));

}

catch(System.Ex ception pe)

{

System.Diagnost ics.Debug.Write Line(pe.ToStrin g());

}

}

I assume I need an implemented ICertificatePol icy if the server certificate is not trusted on the given client?

Erin.

"Trebek" <tr****@inthefo rmofaquestion.c om> wrote in message
news:3f******** *************** @nnrp.fuse.net. ..

Erin,

Sure.

System.Security .Cryptography.X 509Certificates .X509Certificat e cert =

System.Security .Cryptography.X 509Certificates .X509Certificat e.CreateFromCer t

File(@certPath) ;
ServicePointMan ager.Certificat ePolicy = new CertPolicy();
HttpWebRequest tuReq = (HttpWebRequest )WebRequest.Cre ate(addr + "?" + TU);

tuReq.ClientCer tificates.Add(c ert);

tuReq.ContentTy pe = "applicatio n/x-www-form-urlencoded";

tuReq.Method = "GET";

Make sure you have a class (either your class or another) that implements ICertificatePol icy or your app will hang because of the untrusted cert
issue.

EX:

class CertPolicy: ICertificatePol icy

{

public bool CheckValidation Result(ServiceP oint srvPoint, X509Certificate
certificate,

WebRequest request, int certificateProb lem)

{

return true;

}

}

Alex



"EMonaco" <er********@nos pam.net> wrote in message
news:Oo******** ******@tk2msftn gp13.phx.gbl...

Is there any way to programmaticall y select a particular client

certificate

and associate it with an HttpWebRequest instance? I know using WinINet

this

was possible.
Erin.