Quantcast
Channel: URL Rewrite Module
Viewing all articles
Browse latest Browse all 2482

Proxy using ARR to provide client certificate over SSL

$
0
0

I have configured a IIS 7 Proxy using ARR under Windows 2008 R2. My goal is to let the IIS proxy provide a client certificate when performing a WebService call. See "diagram" below.

  1. Server A -(SOAP call over https)-> IIS Proxy -(SOAP call over https)-> Server B (External WS)
  2. Server B -(Client certificate request)-> IIS Proxy (Provides public part of PKCS12 cert)
  3. IIS Proxy -(Sends certificate and completes TLS handshake)-> Server B
  4. Server A -(Sends SOAP message)-> IIS Proxy -(SOAP message)-> Server B
  5. Server B -(response)-> IIS Proxy -(response)-> Server A

I get as far as step 1, then I receive error "HTTP Error 502.3 - Bad Gateway" (0x80072f0c) Err.exe reports 0x80072f0c as error "ERROR_INTERNET_CLIENT_AUTH_CERT_NEEDED".

I have imported the PKCS12 certificate to IIS. I have imported the PKCS12 certifier to "Intermediate Certification Authorities" and "Trusted Root Certification Authorities" for PKCS12 certificate using mmc.

What am I missing here?


Viewing all articles
Browse latest Browse all 2482

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>