Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

IIS Allows all certificates

$
0
0

Hi,

I configured a test application on IIS to use client certificates (i.e. SSL settings are set to required). I have mapped my client certificate to a local user using the iis client certificate mapping authentication configuration. 

When I browse to the application I kndly get a prompt from the browser to select my client certificate and after selecting the certificate I am allowed to enter. But when I select a certificate which I did not map to a local user I am still allowed to view the application, where I expected to get a 403 Forbidden.

I also configured iis with cient certificate mapping on a virtual machine and there it works at expected, but on our test server it is not. 

Can anyone please help me out?

regards,

Kishen


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>