Questions tagged [cac]

The Common Access Card (CAC) is a United States Department of Defense (DoD) smart card, used for email signing, authentication, and access to DoD computers and networks.

The Common Access Card (CAC) is the standard identification for active-duty military personnel, Selected Reserve, DoD civilian employees, and eligible contractor personnel. It is a smart card that can be used for PKI and PIV purposes. In addition it has a 2D bar code for additional identification.

CAC Developer Resources.

110 questions
1
vote
1 answer

Server Side Java: Can it read CAC cards and if so, how?

I'm using Java 5 - 6 , Spring 3.1 and WebLogic 11g. The place where I work (the government ) now requires people to insert a CAC card to get into their PCs. I would like to learn how to use Server Side Java to read information off of a Common Access…
Steve
  • 3,127
  • 14
  • 56
  • 96
1
vote
2 answers

How to add an e-signature to a PDF File from a Smart Card?

I have a Java EE app that needs to implement e-signing of PDF Files. The user needs to be able to click a link that will generate a PDF File based on data in the database and see the PDF in their browser. The use then needs to be able to "sign" the…
BestPractices
  • 12,738
  • 29
  • 96
  • 140
0
votes
0 answers

ASP NET Website Smart Card / CAC Authentication

I have an ASP.NET 4.8 Web Forms Application built and ready to deploy that I need to add Smart Card authentication to (DoD CAC Card X509). The actual authentication is extremely loose... anyone at all with a DoD-issued CAC should be able to access…
rpr
  • 13
  • 1
  • 4
0
votes
0 answers

Session Start event not raised on first request using CAC authentication

Our flow of requests has some logic on the Seesion_Start event (asp.net), but when we are using CAC authentication this event is not raised on the first request. Can I force it or validate that is CAC authentication, so I can skip validation for the…
legAToR
  • 65
  • 7
0
votes
1 answer

When I use Request.ServerVariables("CERT_SUBJECT"), what does the value C=US mean?

When I use Request.ServerVariables("CERT_SUBJECT") I end up getting something like this as a string: C=US, O=XXX, OU=XXX, OU=XXX, OU=XXX, CN=DOE.JOHN.JACOB.9999999 what does the value C=US mean? is this the cardholder's citizenship? The country of…
0
votes
0 answers

CAC graph and calculation

A nutrition plan app has a subscription that costs $10/month. The following chart gives average historical renewal rates for subscribers based on how many months they have been a subscriber. Month and Renewal rate 1st- 70% 2nd- 80% 3rd- 85% 4th and…
ladyd
  • 37
  • 1
  • 10
0
votes
1 answer

How to obtain Request.ServerVariables("CERT_SUBJECT") from a CAC while debugging in Visual Studio 2015 with IIS Express

I have an ASP.NET webpage that reads a user's CAC card. When publishing to a test server, it works fine; however, in my local development environment with IIS Express I get empty strings when using Request.ServerVariables("CERT_SUBJECT"). I AM able…
Carlos Mendieta
  • 860
  • 16
  • 41
0
votes
2 answers

Getting HttpClientCertificate in ASP.NET MVC app

I've seen Common Access Cards (CAC) being read into a program before but I am now modifying a ASP.NET MVC application to use CAC authentication to sign into the app , which I have not done before. There seem to be no straight forward explanations…
0
votes
1 answer

Is there a way to connect to a GIT HTTPS site using a smart card on macOS?

I have a bitbucket site that supports smart cards only. It's operational and using Safari I can login using a smart card and PIN. I cannot use SSH for this instance. Does anyone know of a client or way to use Git in a terminal command that would…
sp00led
  • 11
0
votes
1 answer

CAC enable JBoss

I'm trying to enable a web application deployed on JBoss 4.2.3 for client certificate authentication using a DOD issued CAC, ActivClient, and IE on the client machine. As a proof of concept, I was able to get client certificate authentication…
Greg Charles
  • 1,880
  • 4
  • 20
  • 39
0
votes
1 answer

Redirect on Local Host to internal page causes Windows security prompt and redirects to production page

I am developing on Visual Studios a C#/asp.net site to replace the legacy Classic ASP site. We use Air Force CAC cards, and I have configured Visual Studio to use mine. I have a basic start page that has two links to redirects. They redirect to…
pmcs
  • 51
  • 1
  • 10
0
votes
1 answer

Sign PDF form with iTextSharp like a PDF signature

Rather than save a file and then sign it I am filling the data fields with a stamper in a memory stream. MemoryStream fs = GetSaarForm(); PdfReader.unethicalreading = true; PdfReader reader = new PdfReader(fs.ToArray(),…
Dean.DePue
  • 1,013
  • 1
  • 21
  • 45
0
votes
1 answer

What is DoD CAC ADPU Login Sequence?

I have been all over the web, have the DOD and IDO docs for CAC/ADPU, but I cannot find/figure out the sequence to access the data on a card. I would like to get the public info username, e.g. SMITH.JOE.123123123 Thick java application, using…
SRJ
  • 189
  • 3
  • 15
0
votes
1 answer

retrieval of security token upon swipe of CAC card using Java

I am using SCR3310 card reader in Ubuntu, and I have installed the necessary drivers for the smart card reader and it works fine. I have installed pscs_tools to check whether the card/card reader works fine. I have downloaded few public DoD…
Ron
  • 1
0
votes
1 answer

Configuring Apache to Accept Specific Certificate from DOD CAC

I have Apache set up to require a DOD CAC in order to access the site. On most DOD CAC there are actually 3 or 4 different certificates (ID, EMAIL, AUTH, etc). I've noticed that for some websites, you need to pick the correct certificate or it…