Questions tagged [client-certificate]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
33 views

HTTP authentication with public/private key pair

I'm looking for a way to authenticate clients/users at a web server with public/private key pairs and already read this question: Public key authentication or similar over HTTP/HTTPS? The answers are ...
0
votes
1answer
19 views

Choose Client Certificate dialog in FF displays only a subset of available client certs

problem: We have an application here using client certificate authentication. This has been working without any issues for years, but now several clients are experiencing the following issue in FF and ...
0
votes
0answers
30 views

Authenticate using Client certificate with Nginx

I have a couple of client certificates installed on browser, when load https://server on the browser, it prompts for certificate After prompts, two ways are possible select certificate, click ok -->...
2
votes
1answer
109 views

Configure NGINX reverse proxy to verify client certificate custom field

I would like to verify a client certificate "custom" field directly with NGINX before returning it to the actual page. As I understand from here: http://nginx.org/en/docs/http/ngx_http_ssl_module....
0
votes
0answers
176 views

Apache SSLVerifyClient not working for some users

I inherited a system that is running Apache 2.4 that requires users to present client certificates. For some users, their client certificate is not being passed, and are thus denied access. ssl.conf ...
1
vote
0answers
161 views

How to add checks for multiple specific ssl_client_fingerprints in Nginx configuration?

In addition to usual CA chain validation, I would like Nginx server section to permit specific client certificate thumbprints only. I could find how to check for single fingerprint, but I'm not sure ...
0
votes
0answers
53 views

Verify requests are coming from AWS API Gateway in Cloudflare

I have an AWS API Gateway setup which sends requests to some servers. The servers are load-balanced with Cloudflare and this all works well. However, at Cloudflare, I want to make sure that requests ...
0
votes
0answers
20 views

Client certificates as a basic user authentication: Do I need a Root-CA-Clientert chain or should I use just Root-Clientcert signing?

I want to provide certain users with a way to access websites like a wiki, webinterfaces etc. from external unknown IPs while not allowing third parties to reach these websites. Authentication of the ...
0
votes
0answers
105 views

Deployed certificate to Personal store using GPO

I am trying to find a user GPO to install a certificate in the personal store (this is a browser certificate and if installed in other stores it won't work so it has to be installed in the Personal ...
0
votes
1answer
237 views

OCSP client certificate validation

For a home automation project I have created an API (written in ASP.NET so hosted in IIS) and written my own Android app to communicate with this API. To prevent people from accessing specific ...
4
votes
1answer
2k views

How does one forward a client authentication certificate through HA proxy while terminating TLS?

I have a web API fronted by an HA Proxy load balancer. The web API uses client authentication certificates for identity authentication and authorization. I'd like the HA Proxy appliance to terminate ...
0
votes
0answers
45 views

apache/php not getting client certificates

We wanted to use client certificates in browsers for some of our users for machine identification. I set up a CA and and signed a client certificate which I installed in chrome. Then I set the ...
1
vote
1answer
1k views

Add Client Certificate when acting as a reverse proxy

I basically have the exact same problem as Add Client certificate when acting as reverse proxy (Apache/NGINX) , but in my case there is no nginx that can help me out. I want a certain location inside ...
3
votes
1answer
1k views

AWS API Gateway Lambda Authorizers + Client certificates

I'm evaluating the use of client certificatates to improve security in an application i'm working on. It all run behind on AWS and pass through an API Gateway with an attached Lambda authorizer. AWS ...
0
votes
0answers
64 views

Is there a way to configure IIS to tell us we received an untrusted client certificate?

We have a Web API endpoint configured to allow, but not require, client certificates. We're logging the certificate we receive, then checking to make sure it is what we expect, logging the result, ...
4
votes
1answer
567 views

Debugging client certificate issues on IIS

We have an 2008R2 IIS server set up with a site configured to require client certificates. Our test client isn't working, and we're trying to debug why. During the course of this, we've set up a new ...
0
votes
0answers
41 views

Assigning third-party client certificates/keys to Active Directory users

In our organization, we have a number of third-party vendors that we must interact with using client certificates. We'd like to be able to assign certificates/keys to a particular Active Directory ...
-1
votes
1answer
387 views

Is a windows user really needed for IIS client certificate authorization, if so how to set this user's privileges?

I had originally posted this question in securitystackexchange, but I didn't get the answer I was expecting, and I see the topic can also fit here. I need to connect two servers in different ...
0
votes
1answer
4k views

curl - SSL peer does not support certificates of the type it received

Trying to send a request with a client certificate to an Apache server, I have the following request and error: $ curl -X POST https://my-server.com/dummy/user -H 'Cache-Control: no-cache' -H '...
1
vote
1answer
2k views

List all client certificates installed on user profiles in a domain

I'm taking initial steps to start securing a network, and I've come across the fact that a number of machines have Client Certificates for websites installed in the user client certificate store, ...
1
vote
1answer
264 views

Nginx: Change value of `ssl_verify_client` based on request IP

When setting up nginx with client-certificate config, ssl_verify_client should be set to on or optional. If we want to bypass verification for local users (like 192.168.0.0/24), we can use optional ...