I've no knowledge about IIS, a problem might be the
CA cert.

Is the Certificate Authority also known to IIS?
(I don't know if you also added the CA cert. used to
generate the Client Certificate to the Server...)

Otherwise the client certificate is correct but cannot be validated against an
authority cert.

cheers,
Nico Baggus

> -----Original Message-----
> From: curl_at_contactor.se
> Sent: Thursday, May 03, 2001 09:17
> To: curl_at_contactor.se
> Subject: Curl and IIS 4 Client Authentication using pem certs
>
>
> Hi,
>
> I'm trying to set up a folder on IIS 4 with client certificate
> authentication (and with "Enable Client Certificate Mapping"
> checked). I've
> created a signed certificate using Openssl and used it to
> create an entry in
> the "Account Mappings" mapping it to a NT account user. I
> then restarted
> the IIS server juz to ensure the mapping is enforced.
>
> From another machine, I've tried the curl application:
> curl --cert test.pem https://testserver_ip/secure_folder/index.htm
>
> But the IIS is always giving the error that the server requires an
> appropriate client certificate before allowing access to the resource.
>
> Anyone tried this before??
>
> Thanks,
> Ziozio
> ______________________________________________________________
> ___________
> Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com.

-----------------------------------------------------------------
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-----------------------------------------------------------------
Received on 2001-05-03