?
Solved

http header that request a certificate

Posted on 2012-04-06
5
Medium Priority
?
786 Views
Last Modified: 2012-05-05
Hi,

How can I detect in the http request or response header if the website are requesting a certificate for authentication purposes?

I need this information to generate a special filter rule in our firewall.

Regards
0
Comment
Question by:lnrivera
  • 3
  • 2
5 Comments
 
LVL 51

Expert Comment

by:ahoffmann
ID: 37819221
server will send the
  WWW-Authenticate
header with the value for the realm
0
 

Author Comment

by:lnrivera
ID: 37819412
I need to know only when the authenticate request need a local certificate to login.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 37822646
are you talking about SSL/TLS client certificates?
if so, you cannot detect in the response, the client send matching certificaes automatically or ask which one to send
0
 

Accepted Solution

by:
lnrivera earned 0 total points
ID: 37911987
Finally I did it filter the serial number of the certificate in the tcp traffic packets
0
 

Author Closing Comment

by:lnrivera
ID: 37932260
I don't receive an answer, and finally I solved it by myself
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
The Internet has made sending and receiving information online a breeze. But there is also the threat of unauthorized viewing, data tampering, and phoney messages. Surprisingly, a lot of business owners do not fully understand how to use security t…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question