Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > SOAP access denied when IIS set to required client certificate

Thread Tools

SOAP access denied when IIS set to required client certificate

Posts: n/a
I'm building a .NET web service which requires client certificate for strong
security. I set IIS to require SSL and client certificate (under site
properties in IIS admin, Directory Security tab, Secure Communication,
Edit... button. then check Require Secure Channel and Require Client
Certificates). Then in my client side code, I add my client certificate to
the property HttpWebClientProtocol.Certificates. However, I keep getting a
"Access Forbidden" error (System.Net.WebException) when I run the client,
which is a .NET Windows application.

I know the client certificate is good, because when I access the site from
IE, it prompts me for a client certificate, and it goes through ok after I
select the certificate. Also I know the cleint certificate is valid and
seems to be sent over to the server, as I created another web service to
only take signed SOAP message using the client certificate (with WSE 1.0),
and it correctly recognize the signiture. Seems to me the .NET part works
fine, but for whatever reason IIS can't seem to recognize the client
certificate sent over. As soon as I uncheck "Require Client Certificate" in
IIS, the call goes through (so the server SSL is good too).

I have exhausted everything I can think of. Can anyone give me some

Thanks a lot

Reply With Quote
Scott Sullivan
Posts: n/a

Yes, Bob. I have this EXACT same problem. Does anyone know how to


*** Sent via Developersdex ***
Don't just participate in USENET...get rewarded for it!
Reply With Quote

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Access denied 403.7 client certificate Zerro ASP .Net Security 2 01-10-2008 01:28 PM
403 Forbidden: You were denied access because: Access denied by access control list Southern Kiwi NZ Computing 6 03-19-2006 05:19 AM
MSXML posting SOAP message with Client Certificate SP ASP General 0 08-26-2005 03:19 PM
Access denied when IIS set to require client certificate Bob ASP .Net Web Services 0 11-14-2003 11:48 PM
SOAP Client creation in ASP.NET using MS SOAP Toolkit Sham Ramakrishnan ASP .Net 2 07-01-2003 11:29 AM