473,413 Members | 1,696 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,413 software developers and data experts.

SSL Mutual Authentication: How to determine user?

Hi All,
We are developing a web service that will be consumed by an external
java-based client (using AXIS if that helps). Their specification dictates
that we will use SSL Mutual Authentication. In order for this to work, I
assume they will provide me with the public key of their certificate and we
will configure IIS to accept the root authority (who will be their own
internal CA I'm assuming) on the certificate as a trusted CA. I'm OK with
that but my question is how do I validate the EXACT identity of the
certificate. I don't want to (and am not sure if I can) use the
client-mapping stuff including IIS as we have little control over the
infrastructure and may not be able to create a mapped account.

Are there properties I can check of the HttpClientCertificate class that can
give me this information in a valid secure way? Is there a better way of
handling this? Or am I just talking a lot of nonsense. If anyone has done
something even remotely similar, I'd love to hear about it.

Thanks All,

David
Nov 23 '05 #1
0 2694

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: Raquel | last post by:
I am confused between Authentication at Instance Vs Authentication at Database. Instance authentication is specified at Instance creation time (db2icrt) and is stored in db mgr. cfg. file while...
4
by: Andrew | last post by:
Hey all, I would like to preface my question by stating I am still learning ASP.net and while I am confident in the basics and foundation, the more advanced stuff is still a challenge. Ok....
3
by: Stephanie Stowe | last post by:
I am new to ASP.NET having come from ASP classic background. I need to understand authentication. I have a server running IIS which contains an ASP.NET app. On IIS the app has both anonymous and...
5
by: Maziar Aflatoun | last post by:
Hi everyone, I have a login .aspx page that I like to forward my users to. However, can't do it using <authorization> ..... </authorization> because I need anonymous users to use it without...
2
by: Smithers | last post by:
Will Forms Authentication work for me, or do I have to "roll my own" security model on this one. What I have is an aspx page that will display information based on a querystring value. Some of...
8
by: Mark | last post by:
How would i go about using windows authentication to determine whether someone was in a active directory group, and if they were the page would display something different. For instance, when...
0
by: David C | last post by:
Hi All, We are developing a web service that will be consumed by an external java-based client (using AXIS if that helps). Their specification dictates that we will use SSL Mutual Authentication....
0
by: Sinex | last post by:
Hi, Am developing a web service that is gonna be consumed by a client over https. I'm using certificates to get the mutual authentication in place. On the server side, I want my service to be able...
5
by: Rory Becker | last post by:
Having now created a Custom MembershipProvider that seems to work correctly with my Logon and ChangePassword controls, I am, as they say, a happy bunny. The next stange is to move on to the...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.