We have a 3rd party .NET web application providing an application API. One of the web services takes a URL to a file hosted on an Apache web server as a parameter. The web service calls the URL, downloads the file and processes it. We now want to set up client/server mutual authentication. The Apache server has a SSL server certificate and we would like to enforce client certificates on the Apache server. This means that the IIS web service will need to send a client certificate to Apache. I've seen code examples for looking up a client certificate and attaching it to the request but we don't have access to the source. Our supplier is telling us that IIS can be configured to send the client certificate without a change to the code. I have not seen any examples of this online. Can someone tell me if this is possible please.
↧