Been away for a while…

Comments

# Rahul Soni said:

Good good... you definitely needed that break :-)

Howz life?

07 September 09 at 12:32 AM

# Saurabh Singh said:

Hey Rahul, am doing good and hope the same for you :-). I shall call you at the earliest. Strange we talk over this way, hahaha.

07 September 09 at 2:44 AM

# Sanjeet said:

Who is behind the camera? I can see those toothies in all your snaps ;) which is a good thing. Keep rocking and stoning and hilling and mountaining!

18 September 09 at 6:45 AM

# kblackma said:

Hi Saurabh,

Glad to see that you enjoyed your vacation.

We have an issue with a project on which we are working with Microsoft.

We would like to force renegotiation of an ISS SLL -Client Authenticated session from within an ASP.NET application.

Is there a way to do this?

Best regards,

Kevin

--------------------------------------------------------------------------------

Sent: mercredi, 30. septembre 2009 12:34

Subject: RE: Pregunta sobre ejecutar el "Clear SSL State" del browser desde el servidor

.......

Looking on Google, it seems to work only in IE6+ and to be undocumented.

Some guys seem to have it working:

http://www.yeraze.com/2009/03/purging-ies-ssl-cache/

It must be checked with IIS & SSL Handshake, to see if it causes a re-authentication or an error.

Otherwise, you can play with SChannel timeout configuration in the registry of IIS.

You can set it to very short, causing re-authentication on each HTTP request.

You may also do something programmatically uf zsubg:

http://msdn.microsoft.com/en-us/library/aa379413(VS.85).aspx

However the above method does not appear to be applicable to IIS.

A silly question if someone has already thought this before and he knows by heart:

In Internet Explorer there is a button to clear the SSL cache and force him to again request the client certificate. This can be forced from JavaScript with instruction document.execCommand ( "ClearAuthenticationCache");

The question is: does anyone know if possible and easy to do from the server side in ASP.NET, so they always ask the user to select the certificate? (playing with the sessions, etc.)

Sent: Wednesday, September 16, 2009 11:18 AM

To:

Subject: Pregunta sobre ejecutar el "Clear SSL State" del browser desde el servidor

Importance: Low

Una pregunta tonta por si alguien ya se ha peleado con esto antes y se lo sabe de memoria:

En Internet Explorer existe un botón para borrar el caché de SSL y forzar a que se le vuelva a pedir el certificado al cliente. Esto se puede forzar desde JavaScript con la instrucción document.execCommand("ClearAuthenticationCache");

La pregunta es: ¿alguien sabe si es posible y fácil hacerlo desde el lado de servidor en ASP.NET, de forma que siempre se pida al usuario seleccionar el certificado? (jugando con las sesiones, etc)

03 October 09 at 1:03 AM

# Saurabh Singh said:

Hey Kevin, sorry am on a vacation currently and hence could not check your comment until now. If you are still working on this issue i would be back next week and then we can take it further. Sorry can't be of much help as of now.

07 October 09 at 12:18 PM

# Kevin Blackman said:

Hi Saurabh, That's fine. Enjoy your vacation, would be glad for your help once you are back :-) All the best, Kevin

07 October 09 at 12:22 PM

Leave a Comment

Comment Policy: No HTML allowed. URIs and line breaks are converted automatically. Your e–mail address will not show up on any public page.

Name (required) 

Your URL (optional)

Comments (required) 

  

Enter Code Here: Required

Remember Me?

About Saurabh Singh