Disable integrated client certificate validation in IIS7?

Posted by danford on Server Fault See other posts from Server Fault or by danford
Published on 2009-10-07T13:59:20Z Indexed on 2010/03/19 2:11 UTC
Read the original article Hit count: 1056

Filed under:
|
|
|
|

We have an IIS 7 hosted site that requires client certificates (two-way ssl). Unfortunately, I don't have access to the trusted certificate store on the host machines, and so I was forced to write a custom http module to verify the certificates. My module never gets a chance to do the authentication, however, because IIS doesn't recognize the certificates and responds with a 403.7 error. How do I turn off client certificate validation, while still requiring clients to provide them?

© Server Fault or respective owner

Related posts about iis

Related posts about iis7