Questions tagged [ssl-client-authentication]

94 questions
1
vote
0 answers

Eclipse Egit with SSL Client Certifcate Fails on push to remote (git-receive-pack not permitted)

Before I start, let me say that I have read all the other posts on similar topics and found no solution. My remote git repository (Gitea) is hosted on an https enabled VPS and the server is configured with SSL client authentication, so it requires…
timbar
  • 96
  • 5
1
vote
3 answers

How to create a test server which uses TLS client authentication in Go?

I'd like to write a unit test for an HTTP handler which extracts certain information from a device's certificate. I've found this gist, https://gist.github.com/ncw/9253562, which uses openssl to generate the certificates and simply reads the…
Kurt Peek
  • 52,165
  • 91
  • 301
  • 526
1
vote
1 answer

Go: validate subsequent http requests with authenticated client via certificate

I'm currently writing a HTTP server(net/http) which hosts multiple endpoints and requires client authentication(step 1) before accessing these endpoints. Upon successful authentication, the server issues a short-lived token which the client then use…
Pr1614
  • 61
  • 1
  • 6
1
vote
0 answers

How to use Python requests to connect to a server through proxy when both requires different client certificate

I want to connect to a https server using python requests library through a proxy. The code roughly looks like response = requests.get(SERVER_ENDPOINT, proxies=PROXIES, cert=??) My problem is, both server and proxy requires client authentication,…
1
vote
2 answers

Failing Client Authentication on Chrome with Self Signed Certificates

I understand there are lot of questions on this same topic out there. Unfortunately nothing solved my exact problem. So let me be specific. I'm developing a set of REST APIs which require certificate authentication(weird but its like that). So for…
Kris
  • 8,680
  • 4
  • 39
  • 67
1
vote
1 answer

ERR_SSL_CLIENT_AUTH_SIGNATURE_FAILED when reading smart card

I am developing a web app with React (front-end) and Nodejs (back-end) and I need to use digital certificates to authenticate. The options given to the server are: key: fs.readFileSync('./certs/localhost_key.pem'), cert:…
1
vote
1 answer

Client Certificate Authentication between IIS reverse proxy and origin server

I am fairly new to IIS. We have a requirement to setup a reverse proxy using IIS. Now the origin / backend server can be on HTTP or HTTPS. We have successfully configured mutual authentication on IIS for the client to require SSL and present a…
1
vote
3 answers

Which SSL certificate will be selected if client has multiple certificates in key store

Could you please help me on following two questions? I have a FIX engine that connects to FIX servers. There is a FIX server that requires client to authenticate itself during SSL handshake. It also provides a SSL certificate that I need to use…
Rohit Singhal
  • 59
  • 2
  • 7
1
vote
0 answers

Client certificate common name? Subject alternative name?

I want to secure client server communication. I want both the server and the clients identify/authenticate each other. I would like to know, how to set common name and subject alternative names for clients on server? As we know, on client side, we…
1
vote
1 answer

Java JKS files read from resource dir Keystore Exceptions

I copied the keystore.jks & cacerts files into the restapi project under src/main/resources. And facing the below exception. But when i try to read keystore.jks & cacerts files from linux path[ instead of reading from resources dir ] it works.…
RaAm
  • 1,072
  • 5
  • 22
  • 35
1
vote
1 answer

SSL certificate verify error: (25:path length constraint exceeded)

I am using Kong API Gateway (built on top of nginx). I configured client certificate authentication in nginx.conf: ssl on; ssl_certificate ${{SSL_CERT}}; ssl_certificate_key ${{SSL_CERT_KEY}}; ssl_protocols TLSv1.1 TLSv1.2; …
1
vote
2 answers

Having problem in authenticating kubernetes python client

my lisNamespaces.py file from __future__ import print_function import time import kubernetes.client from kubernetes.client.rest import ApiException configuration = kubernetes.client.Configuration() configuration.ssl_ca_cert =…
1
vote
0 answers

Java/Jetty: how to choose signature algorithm in TLS client authentication

Preamble OpenJDK 11.0.2 2019-01-15 I am using mutual authentication when connecting to a Jetty (9.4.14.v20151114) server using TLSv1.2, with the cipher suite TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384. My client uses standard Java TLS…
Atuos
  • 501
  • 3
  • 12
1
vote
0 answers

Client authentication in React Native app

I'm new to React Native development. I made an app that calls an HTTPS POST API using fetch method. After that I began with the security layer and for that, I was managing to do: To ensure that my app calls my server and there's no man in the…
Kaboom
  • 21
  • 1
  • 5
1
vote
1 answer

create iOS 12 NWConnection that uses client cert

I'm trying to set up an NWConnection that does client side certs: self.connection = NWConnection( host: NWEndpoint.Host("servername"), port: NWEndpoint.Port(integerLiteral: 8899), using: .tls) But I think that simple .tls class var…
Travis Griggs
  • 21,522
  • 19
  • 91
  • 167