Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Get 403.16 when configure web site to HTTPS with client certificate required

$
0
0

I've created self-signed server certificate and client certificate following steps in this article.

I've also installed the issuer's cert into Trusted Root Certification Authorities store in both client side and server side, theninstalled the client .pfx cert and server .pfx cert each to client and server.

Then configured the one-to-one client cert mapping following this article. filled in cert Base64 blob, local administrator's user name and password.

I've installed the related features of IIS: Client Certificate Mapping Authentication and IIS Client Certificate Mapping Authentication.

I then configured the client cert to be required, when Access with IE 10, though the browser prompts me for certificate, the result is always 403 Access denied. Turn on the Failed Request Tracing, found below logs:

48.view traceWarning-MODULE_SET_RESPONSE_ERROR_STATUS<div id="section_errors_48_details">
ModuleNameIIS Web Core
NotificationBEGIN_REQUEST
HttpStatus500
HttpReasonInternal Server Error
HttpSubStatus0
ErrorCodeThe I/O operation has been aborted because of either a thread exit or an application request. (0x800703e3)
</div>

then

20.view traceWarning-MODULE_SET_RESPONSE_ERROR_STATUS<div id="section_errors_20_details">
ModuleNameIIS Web Core
NotificationBEGIN_REQUEST
HttpStatus403
HttpReasonForbidden
HttpSubStatus16
ErrorCodeThe signature of the certificate cannot be verified. (0x80096004)
ConfigExceptionInfo
</div>

Any ideas?


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>