Solved

http header that request a certificate

Posted on 2012-04-06
5
772 Views
Last Modified: 2012-05-05
Hi,

How can I detect in the http request or response header if the website are requesting a certificate for authentication purposes?

I need this information to generate a special filter rule in our firewall.

Regards
0
Comment
Question by:lnrivera
  • 3
  • 2
5 Comments
 
LVL 51

Expert Comment

by:ahoffmann
ID: 37819221
server will send the
  WWW-Authenticate
header with the value for the realm
0
 

Author Comment

by:lnrivera
ID: 37819412
I need to know only when the authenticate request need a local certificate to login.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 37822646
are you talking about SSL/TLS client certificates?
if so, you cannot detect in the response, the client send matching certificaes automatically or ask which one to send
0
 

Accepted Solution

by:
lnrivera earned 0 total points
ID: 37911987
Finally I did it filter the serial number of the certificate in the tcp traffic packets
0
 

Author Closing Comment

by:lnrivera
ID: 37932260
I don't receive an answer, and finally I solved it by myself
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Foreword This article was written many years ago, in the days when PHP supported the MySQL extension (http://php.net/manual/en/function.mysql-connect.php).  Today (http://php.net/manual/en/migration70.removed-exts-sapis.php) you would not use MySQL…
A Change in PHP Behavior with Session Write Short Circuit (http://php.net/manual/en/book.session.php#116217) (Winter 2014)** With the release of PHP 5.6 the session handler changed in a way that many think should be considered a bug.  See the note …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question