0

I am having a little challenge understanding digital certificates and ssl. In IIS SSL Settings for my website I am setting my website to require client certificates.

I am using a self-signed certificate for the site bindings, this is where I am unsure that this will work in conjunction with requiring client certificate for website.

While still in IIS, I click on the website and along the right margin there's a link to browse using SSL. The lock symbol shows up in the address bar but it still won't show the default page.

enter image description here

Improve this question
4
  • Did you actually install the certificate on the client? – Ƭᴇcʜιᴇ007 Dec 31 '15 at 15:54
  • I will presume you install the certificate on the server. This error is normally caused by the client not trusting the certificate on the server. Verify none of the things listed in "most likely reviews" is applicable. – Ramhound Dec 31 '15 at 16:03
  • weblogs.asp.net/scottgu/… Check this site, shows how to create self signed certifcate and apply it to the site forcing local user to communicate over a secure channel. Obviously this will only work internally and not public faving – LSxCPU Dec 31 '15 at 18:26
  • I did install the certificate. – Rod Dec 31 '15 at 20:43
0

If your have set require client certificates than the client which will access your site will have to have a client certificate which the web server has to trust to get a proper response. you could use Portecle to create server and client certificates - a proper way would be to create a root certificate which would be used to create the server and client certificate. You could set client certificates to Ignore or Accept. The Required setting is only used if you want your web server to trust the client. For example, in an Active Directory Domain you have a publicly facing Web Server and you want that only users whom you have provided a client certificate have access. The same is used in some Online Banking Systems I know of where the client certificate is on a smart card and you are not able to access the OLB System without providing the certificate.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.