.NET Core HttpClient - certificate does not go through to a server
I'm trying how to restrict access to an API using certificate. My problem is, that I can not make the certificate to actually make it to the API.
This is how I setup the HttpClient
var handler = new HttpClientHandler();
handler.ClientCertificates.Add(new X509Certificate2("certificate.cer"));
var httpClient = new HttpClient(handler);
httpClient.BaseAddress = new Uri("http://localhost:54261/api/");
httpClient.DefaultRequestHeaders.Accept.Clear();
httpClient.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
Now, on the server side, in custom AuthorizationHandler, I inject IHttpContextAccessor and then try to get the certificate like this
var clientCertificate = _httpContextAccessor.HttpContext.Connection.ClientCertificate;
Unfortunately, clientCertificate is always null.
I generated the self-signed certificates using this software:
http://www.itiverba.com/en/software/itisscg.php
I simply generated a certificate, that is a CA. Then I generated normal certificate that was signed by previously generated CA certificate. I chose to copy both of them into the Certificate Store.
I tried some steps like
- adding certitifacate to trusted (hopefully did this one correctly)
- adding
SslNegotiateCertinapplicationhost.configintosslFalgs
At the end of this, certificate is stil null. Could I ask for some guidance, what might be wrong?
.net-core certificate
asked Nov 15 '18 at 16:21
DencoDenco
164
add a comment |
I'm trying how to restrict access to an API using certificate. My problem is, that I can not make the certificate to actually make it to the API.
This is how I setup the HttpClient
var handler = new HttpClientHandler();
handler.ClientCertificates.Add(new X509Certificate2("certificate.cer"));
var httpClient = new HttpClient(handler);
httpClient.BaseAddress = new Uri("http://localhost:54261/api/");
httpClient.DefaultRequestHeaders.Accept.Clear();
httpClient.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
Now, on the server side, in custom AuthorizationHandler, I inject IHttpContextAccessor and then try to get the certificate like this
var clientCertificate = _httpContextAccessor.HttpContext.Connection.ClientCertificate;
Unfortunately, clientCertificate is always null.
I generated the self-signed certificates using this software:
http://www.itiverba.com/en/software/itisscg.php
I simply generated a certificate, that is a CA. Then I generated normal certificate that was signed by previously generated CA certificate. I chose to copy both of them into the Certificate Store.
I tried some steps like
- adding certitifacate to trusted (hopefully did this one correctly)
- adding
SslNegotiateCertinapplicationhost.configintosslFalgs
At the end of this, certificate is stil null. Could I ask for some guidance, what might be wrong?
.net-core certificate
asked Nov 15 '18 at 16:21
DencoDenco
164
add a comment |
I'm trying how to restrict access to an API using certificate. My problem is, that I can not make the certificate to actually make it to the API.
This is how I setup the HttpClient
var handler = new HttpClientHandler();
handler.ClientCertificates.Add(new X509Certificate2("certificate.cer"));
var httpClient = new HttpClient(handler);
httpClient.BaseAddress = new Uri("http://localhost:54261/api/");
httpClient.DefaultRequestHeaders.Accept.Clear();
httpClient.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
Now, on the server side, in custom AuthorizationHandler, I inject IHttpContextAccessor and then try to get the certificate like this
var clientCertificate = _httpContextAccessor.HttpContext.Connection.ClientCertificate;
Unfortunately, clientCertificate is always null.
I generated the self-signed certificates using this software:
http://www.itiverba.com/en/software/itisscg.php
I simply generated a certificate, that is a CA. Then I generated normal certificate that was signed by previously generated CA certificate. I chose to copy both of them into the Certificate Store.
I tried some steps like
- adding certitifacate to trusted (hopefully did this one correctly)
- adding
SslNegotiateCertinapplicationhost.configintosslFalgs
At the end of this, certificate is stil null. Could I ask for some guidance, what might be wrong?
.net-core certificate
asked Nov 15 '18 at 16:21
DencoDenco
164
I'm trying how to restrict access to an API using certificate. My problem is, that I can not make the certificate to actually make it to the API.
This is how I setup the HttpClient
var handler = new HttpClientHandler();
handler.ClientCertificates.Add(new X509Certificate2("certificate.cer"));
var httpClient = new HttpClient(handler);
httpClient.BaseAddress = new Uri("http://localhost:54261/api/");
httpClient.DefaultRequestHeaders.Accept.Clear();
httpClient.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
Now, on the server side, in custom AuthorizationHandler, I inject IHttpContextAccessor and then try to get the certificate like this
var clientCertificate = _httpContextAccessor.HttpContext.Connection.ClientCertificate;
Unfortunately, clientCertificate is always null.
I generated the self-signed certificates using this software:
http://www.itiverba.com/en/software/itisscg.php
I simply generated a certificate, that is a CA. Then I generated normal certificate that was signed by previously generated CA certificate. I chose to copy both of them into the Certificate Store.
I tried some steps like
- adding certitifacate to trusted (hopefully did this one correctly)
- adding
SslNegotiateCertinapplicationhost.configintosslFalgs
At the end of this, certificate is stil null. Could I ask for some guidance, what might be wrong?
.net-core certificate
.net-core certificate
asked Nov 15 '18 at 16:21
DencoDenco
164
asked Nov 15 '18 at 16:21
DencoDenco
164
asked Nov 15 '18 at 16:21
DencoDenco
164
asked Nov 15 '18 at 16:21
DencoDenco
164
asked Nov 15 '18 at 16:21
DencoDenco
164
164
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53323742%2fnet-core-httpclient-certificate-does-not-go-through-to-a-server%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53323742%2fnet-core-httpclient-certificate-does-not-go-through-to-a-server%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
