I have a project that require client application to register and then use the services. I would like to do the following:
- A client app sends a request with IP, domain name, etc. to my REST service
- The rest service creates a new certificate based on the parameters and then sends back to the app.
- The application will then send the thumbprint of the certificate to prove it is genuine.
- On receiving the certificate, I will use the server certificate which has private key to validate the received input.
I have been searching in the internet and only found that the certificate were created manually. Also, there was no way to generate a certificate on runtime
Please suggest the right practice. I am a .net developer.