I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external organisation.
My question may be stupid but here we go, do I make the certificate request in the same way as I would for a web site running on that server? So through IIS and use the name of a website hosted on that machine for the fully qualified domain name? I am a bit confused as to how that then applies to a Windows Service which happens to be running on the same machine. Or is that not relevant?
I am really not clear on how the certificates are passed from client to host and from host to client but that may be for another question.