7

I use a particular HTTPS website, but I have two separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which needs certificate B).

Internet Explorer caches SSL certificates on a per-domain basis, so in order to change to the other certificate, I have to clear the SSL Cache in Internet Options.

Is there any way that I could prevent Internet Explorer from caching SSL certificates for domains?

If not, is there a way that I could clear the SSL cache through a script or command?

I'm using Windows 7, Internet Explorer 9.

Improve this question
5
  • 1
    Most SSL client certificate authentication systems rely on the user continuing to use the client certificate automatically in any further interactions as I understand it. If that is the case for your app, disabling SSL client certificate caching would result in immediately being effectively logged out on the next page load, and thus being unable to properly use the app with either certificate A or B, so while this would allow you to switch certificates more easily, it would probably not be the desired result.
    – Jeremy Sturdivant
    Jan 27, 2014 at 21:50
  • I think the most you could do is write a script that deletes these two certificates from the store. You then avoid clearing the whole store.
    – harrymc
    Jan 28, 2014 at 11:43
  • @harrymc I do't want to delete them, that would require reinstalling them every time I need to log in. What about a script to clear the SSL cache, like you can do through the Content tab of Internet Options in IE?
    – user201262
    Jan 28, 2014 at 14:31
  • Do you have administrative rights on this "particular https website"?
    – Vanadis
    Jan 28, 2014 at 20:46
  • @Vanadis By that are you asking if I administer the site itself? No, it's a third party service.
    – user201262
    Jan 28, 2014 at 20:53

2 Answers 2

Reset to default
5
+200

The thread Clear SSL State using vbscript contains this command :

"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 3

The thread how to clear authentication cache on ie7 with Javascript? advices to paste into the address bar :

javascript:void(document.execCommand('ClearAuthenticationCache'));
Improve this answer
1
  • Both worked! I've incorporated the first into batch that runs on the start of IE. Thanks!
    – user201262
    Jan 31, 2014 at 21:41
2

Install both certificates, select the one that you use mostly the next time you visit the site, and than use "InPrivate Browsing" (CTRL+SHIFT+P, or via menu) whenever you need to use the other one.

InPrivate browsing is like if you would have clear all cache, history and start with a brand new/(unused before) browser.

Improve this answer

You must log in to answer this question.