WSE and Client Certificate Validation

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Raghu - 25 Aug 2005 00:30 GMT

IIS6 does not a provide any way to drop requests from unknown clients with
client certificates.

Is there a way to configure WSE2 so that it only recognizes certain client
certificates and drop other requests? If it does not provide such mechanism,
do I need to write an HttpModule to achieve this functionality?

Thanks.
Raghu/..

Reply to this Message

Pablo Cibraro - 25 Aug 2005 14:35 GMT

Hi Raghu,
WSE2 provides that functionality. You can write a policy to specify the
expected client certificates.
WSE 3.0 also provides that functionality using the "Authorization"
assertion.

Regards,
Pablo Cibraro.
www.lagash.com

> IIS6 does not a provide any way to drop requests from unknown clients with
> client certificates.
[quoted text clipped - 5 lines]
> Thanks.
> Raghu/..

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...