Questions tagged [ssl-client-authentication]

94 questions
2
votes
0 answers

client authentication with Python SSL module

So, I'm currently trying to create system for client authentication using the python SSL module. My question is the following: the lines bellow provide me with client authentication? server side context.verify_mode =…
2
votes
1 answer

Git LFS and HTTP client authentication

I have a private gitlab instance that requires client authentication when trying to access it via https. So going to myserver.com will only work if you install a client certificate in the web browser. This isn't a problem for regular usage because I…
user16978892
  • 150
  • 1
  • 7
2
votes
0 answers

nginx with TLS Client Authentication... Error response is not mutual authenticated?

I played around with nginx and mutual TLS authentication. For that i configured the nginx server to actually use client authentication with the config parameter: ssl_verify_client on; It works, but i have a question regarding the termination…
2
votes
0 answers

Nginx it is possible to add ssl_client_verify to request header without proxy to let Symfony know a client ssl certificate is being used?

For a website I'm using a nginx configuration that requires a client ssl certificate. I want my Symfony/php project to be able to verify that a client ssl certificate is being used (and provide some extra information from the certificate as well).…
L.A. Rabida
  • 416
  • 3
  • 15
2
votes
1 answer

Client SSL authentication in Rails controller

I'm running a ruby on rails application (rails 4.x) and I have a protected resource that needs authentication using a client certificate. I need to force the client to authenticate with its certifcate. Is that even possible from a rails controller…
vato
  • 409
  • 1
  • 3
  • 15
2
votes
2 answers

How do I set up a SSLContext using certificate from Azure KeyVault in Java

I am working on a Java web application deployed on an Azure App Service instance. And I need to make a call to a REST API that is secured by requiring mutual authentication over SSL. Since this is an app service, I don't have the luxury of adding…
Web User
  • 7,438
  • 14
  • 64
  • 92
2
votes
1 answer

Use fabric-ca without mutual TLS in production?

I am wondering if it is strongly discouraged to use fabric-ca without mutual TLS in production. I am planning to operate a fabric network where a lot of peers, applications and users will be added automatically and the cryptogen tool will not be…
2
votes
1 answer

Apache client authentication OCSP responder issue

I'm having an issue with setting up Apache 2.4.29 on Windows for client authentication with a working OCSP responder. Client authentication works fine when the OCSP responder is turned off. I am also able to verify my client certificate status is…
jbaranski
  • 1,214
  • 2
  • 15
  • 21
2
votes
0 answers

WCF Client Certificate

WCF service is configured for client certificate with X509CertificateValidationMode.Custom and a custom X509CertificateValidator. Binding is WebHttpBinding with WebHttpSecurityMode.Transport and HttpClientCredentialType.Certificate. This setup…
Sency
  • 2,818
  • 8
  • 42
  • 59
2
votes
0 answers

gRpc with TLS Client Authentication using SunPKCS11 in netty fails

I have some java 8 application, using gRPC for network communication. To secure that, I use TLS with client authentication. Now, I try to switch from software keys to a smart card, holding the private key and certificate (chain) for the client…
2
votes
2 answers

How to achieve topic authentication after ssl client authentication with rabbitmq in conjunction with mqtt and a backend for authentification?

I set up RabbitMq v3.6.6 and I'm trying to achieve topic authentication after a successful client ssl authentication. The Client connecting is using mqtt. The configuration so far #/etc/rabbitmq/rabbitmq.config [ {rabbit, [ …
farukg
  • 523
  • 4
  • 12
2
votes
1 answer

Postman and multiple Client Certificates for a single domain?

I've been using Fiddler for a couple of weeks to test an API but we're moving to Postman. Our APIs workflow is that a device must register by using a common cert and as a response to a successful registration a private cert is issued to that device.…
Corey Ogburn
  • 24,072
  • 31
  • 113
  • 188
1
vote
0 answers

"No available authentication scheme" and TLS 1.3

I am getting the "no available authentication" scheme in Oracle Java 11.0.17 with client authentication and TLS 1.3. Server is 11.0.18. Many of my search results say the problem is a DSA certificate, but I don't have a DSA cert so I'd like to know…
John Gregg
  • 125
  • 1
  • 1
  • 8
1
vote
0 answers

Client Authentication request auto cancelled in Apple watch

I am trying to make TLS request for client authentication from a watch. I found that the connection was cancelled immediately after the client (iwatch) provide the client certificate, by calling…
1
vote
1 answer

Mutual Authentication with Reactive Netty on restricted urls

I am using spring cloud gateway to front a legacy application so that we can start migrating things behind the scenes. Some of the urls that are hosted by the application are public facing and some are device restricted. We control the devices and…