Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have a wildcard SSL certificate (from GoDaddy.com) deployed to several Windows 2003 servers. I used IIS management console to import the certificate. The problem is that only one of these servers enables the certificate for client authentication. As a result, our custom application can access SOAP service only on a single server.

Question: what can I do to enable client authentication on other servers?

share|improve this question
add comment

1 Answer

Client authentication in SSL is not correlated with whatever is in the server's certificate. That the server certificate is wildcard or not has no bearing on whether client authentication will be used or not.

Client certificates will be used only if the server asks for them. Then, the server must be able to validate the certificate (make sure that the certificate is genuine, and comes more or less directly from a trusted root), and then to extract a notion of identity from what is in the certificate. In the IIS / Active Directory world, this is called mapping. See this page for some details.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.