"CatpWilco" <captwilco2002@yahoo.com> wrote in message
news:b5611c77.0408031359.1386ddeb@posting.google.com...
> I have an ASP.Net application application that uses a client
> certificate to communicate to a third party.
>
> Now, in Win2K, to install the Class 1 Client Certificate, you have to
> log in as the ASPNET user (or what ever user the aspnet_wp runs as),
> and install the certificate for that user.
>
> In Win2003 (IIS 6.0), I have followed the same process and it does not
> work. I have not been able to find documentation on this. Any tips
> out there?
>
>
> Although my question does not refer to any code, here is a sample to
> give a better picture of what the ASP.Net app is doing.
>
> Dim oRequest As HttpWebRequest
> Dim oResponse As HttpWebResponse
> Dim oClientCert As
> System.Security.Cryptography.X509Certificates.X509Certificate
> Dim POSTBuffer() As Byte
> Dim DataStream As System.IO.Stream
> Dim sr As System.IO.StreamReader
> Dim OutputString As String
>
> POSTBuffer =
> System.Text.Encoding.UTF8.GetBytes("DataToSend")
>
> oClientCert = New
>

>
> oRequest = HttpWebRequest.Create("http://ThirdPartyURL")
> oRequest.Credentials = CredentialCache.DefaultCredentials
> oRequest.ClientCertificates.Add(oClientCert)
> oRequest.Method = POST
> oRequest.ContentType = "application/x-www-form-urlencoded"
>
> Try
>
> DataStream = oRequest.GetRequestStream()
> DataStream.Write(POSTBuffer, 0, POSTBuffer.Length)
> DataStream.Close()
>
> '* * * * * * * * * * * * * * * * * * * * * * * * * *
> '* Code fails here due to a 403.1 error
> oResponse = CType(oRequest.GetResponse,
> HttpWebResponse)
> sr = New
> System.IO.StreamReader(oResponse.GetResponseStream())
> OutputString = sr.ReadToEnd
> sr.Close()
> catch ex Exception
> '(more boring code) ...
>
>
> Thanks,
> R. Wilco

"Jeffrey Hasan" <jeff@noreply.com> wrote in message news:<e9hQUeaeEHA.3792@TK2MSFTNGP09.phx.gbl>...
> I'm not sure what did not work, but in Win2003 you should sign in as a local
> admin to install certificates. Are you just encrypting requests, or, are you
> also decrypting responses? If it is the former then you should be good to
> go. If it is the latter then you may need to grant the ASPNET account
> permission to access the private key. Simon Horrell has an article that
> clearly shows you how to do this. (His article relates to WSE but the same
> principle applies to what you need to accomplish):
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwse/html/wse2wspolicy.asp
>
> Good luck,
>
> Jeffrey Hasan, MCSD
> President, Bluestone Partners, Inc.
> -----------------------------------------------
> Author of: Expert SOA in C# Using WSE 2.0 (APress, 2004)
> http://www.bluestonepartners.com/soa.aspx
>
> "CatpWilco" <captwilco2002@yahoo.com> wrote in message
> news:b5611c77.0408031359.1386ddeb@posting.google.com...
> > I have an ASP.Net application application that uses a client
> > certificate to communicate to a third party.
> >
> > Now, in Win2K, to install the Class 1 Client Certificate, you have to
> > log in as the ASPNET user (or what ever user the aspnet_wp runs as),
> > and install the certificate for that user.
> >
> > In Win2003 (IIS 6.0), I have followed the same process and it does not
> > work. I have not been able to find documentation on this. Any tips
> > out there?
> >
> >
> > Although my question does not refer to any code, here is a sample to
> > give a better picture of what the ASP.Net app is doing.
> >
> > Dim oRequest As HttpWebRequest
> > Dim oResponse As HttpWebResponse
> > Dim oClientCert As
> > System.Security.Cryptography.X509Certificates.X509Certificate
> > Dim POSTBuffer() As Byte
> > Dim DataStream As System.IO.Stream
> > Dim sr As System.IO.StreamReader
> > Dim OutputString As String
> >
> > POSTBuffer =
> > System.Text.Encoding.UTF8.GetBytes("DataToSend")
> >
> > oClientCert = New
> >
> X509Certificate(X509Certificate.CreateFromCertFile(ApplicationConfig.Certifi
> catePath))
> >
> > oRequest = HttpWebRequest.Create("http://ThirdPartyURL")
> > oRequest.Credentials = CredentialCache.DefaultCredentials
> > oRequest.ClientCertificates.Add(oClientCert)
> > oRequest.Method = POST
> > oRequest.ContentType = "application/x-www-form-urlencoded"
> >
> > Try
> >
> > DataStream = oRequest.GetRequestStream()
> > DataStream.Write(POSTBuffer, 0, POSTBuffer.Length)
> > DataStream.Close()
> >
> > '* * * * * * * * * * * * * * * * * * * * * * * * * *
> > '* Code fails here due to a 403.1 error
> > oResponse = CType(oRequest.GetResponse,
> > HttpWebResponse)
> > sr = New
> > System.IO.StreamReader(oResponse.GetResponseStream())
> > OutputString = sr.ReadToEnd
> > sr.Close()
> > catch ex Exception
> > '(more boring code) ...
> >
> >
> > Thanks,