How to use client certificate private key from httprequest.clientcertificate

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default How to use client certificate private key from httprequest.clientcertificate

    I have web site setup with client certificate for user authentication
    mapping the client certificate to an existing NT user account.
    I would like to use the web user client certificate private key from the
    request object to decrypt information that has been encrypted using that
    same user's client certificate public key. How can I use the private key
    off the request object?


    LlibreDev Guest

  2. Similar Questions and Discussions

    1. Setting up client certificate.
      I am trying to use a web service over ssl, that requires a client certificate to be installed. i imported a .p12 file and my windows applications...
    2. Permition certificate private key from webservice
      Anybody knows how access private key X509Certificate from CertificateStore (Microsoft.Web.Services2.Security.X509.X509CertificateStore namespace) to...
    3. ASP.Net using a Client Certificate on IIS 6.0
      I have an ASP.Net application application that uses a client certificate to communicate to a third party. Now, in Win2K, to install the Class 1...
    4. Programmatically Asking for Client Certificate
      Hello All, I have written a web service. I've added the following code to the global.asax.cs protected void Application_BeginRequest(Object...
    5. client certificate
      Hi, I have this problem: I use windows 2003 iis6 and framework. I installed some web service with client certification required but if i ask the...
  3. #2

    Default Re: How to use client certificate private key from httprequest.clientcertificate

    In article <WTiWb.8372$rv1.5824089@news4.srv.hcvlny.cv.net> , "LlibreDev"
    <LlibreDev@optonline.net> wrote:
    >I have web site setup with client certificate for user authentication
    >mapping the client certificate to an existing NT user account.
    >I would like to use the web user client certificate private key from the
    >request object to decrypt information that has been encrypted using that
    >same user's client certificate public key. How can I use the private key
    >off the request object?
    You don't. The client hasn't sent you the private key of his certificate -
    in fact, it would be quite a security violation for him to do so. It's his
    _private_ key, so it stays under his control, on his client computer.

    Alun.
    ~~~~

    [Please don't email posters, if a Usenet response is appropriate.]
    --
    Texas Imperial Software | Find us at [url]http://www.wftpd.com[/url] or email
    1602 Harvest Moon Place | [email]alun@texis.com[/email].
    Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers.
    Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.
    Alun Jones [MS MVP] Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139