How to use client certificate private key from httprequest.clientcertificate

L

LlibreDev

I have web site setup with client certificate for user authentication
mapping the client certificate to an existing NT user account.
I would like to use the web user client certificate private key from the
request object to decrypt information that has been encrypted using that
same user's client certificate public key. How can I use the private key
off the request object?
 
A

Alun Jones [MS MVP]

"LlibreDev" said:
I have web site setup with client certificate for user authentication
mapping the client certificate to an existing NT user account.
I would like to use the web user client certificate private key from the
request object to decrypt information that has been encrypted using that
same user's client certificate public key. How can I use the private key
off the request object?

You don't. The client hasn't sent you the private key of his certificate -
in fact, it would be quite a security violation for him to do so. It's his
_private_ key, so it stays under his control, on his client computer.

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

No members online now.

Forum statistics

Threads
473,744
Messages
2,569,484
Members
44,903
Latest member
orderPeak8CBDGummies

Latest Threads

Top