SSL client-side certificate

5 Feb 2009 2:06 PM

Serge

Hello,

i explored this article:
http://support.microsoft.com/kb/315588

My questions are about client-side certificate for using in SSL tunnel

1. can it be self-signed root certificate?
2. if no client certificate is used, how SSL handshake happens? what
certificate/private key is used on the client side?
3. how IIS detects, is certificate, used by client, acceptable or not?

--
Serge

6 Feb 2009 2:10 PM

DaveMo

On Feb 5, 6:06 am, Serge <m***@km.ru> wrote:

> Hello,
>
> i explored this article:http://support.microsoft.com/kb/315588
>
> My questions are about client-side certificate for using in SSL tunnel
>
> 1. can it be self-signed root certificate?
> 2. if no client certificate is used, how SSL handshake happens? what
> certificate/private key is used on the client side?
> 3. how IIS detects, is certificate, used by client, acceptable or not?
>
> --
> Serge

1) Yes, but you'll have to import the cert on the server.
2) In normal SSL the client doesn't use anything besides the public
key of the server. Basic SSL is server auth only and only uses the
Server certificate.
3) Because the certificate chain is trusted. See this article
http://support.microsoft.com/kb/332077

HTH,
Dave