0

I know server certificate can be verified by client using.

HttpWebRequest request = WebRequest.CreateHttp( url );
request.ServerCertificateValidationCallback += ValidateServerCertificate;

but if I need to validate the client certificate on server that it is issued by a proper CA, it is not expired and the certificate is not revoked, then how I will verify as two way SSL requires both client and server certificates to be verified.

Aishwary Rastogi
  • 115
  • 1
  • 7

1 Answers1

0

You can add a service certificate node in the server configuration file to configure client certificate information. Then customize a class that inherits X509CertificateValidator on the server side, and override the verification method in this class to verify the client's certificate. For specific operations, you can refer to:X.509 Certificate Validator.

Theobald Du
  • 824
  • 4
  • 7