2

I've a ASP.Net Webapp running on IIS7.5. The Webserver is configured to accept Client Certifcates. Unfortunately Visitors with Safari Browser are unable to view the Page. Same Problem as described under the following link: http://www.mnxsolutions.com/apache/safari-providing-an-ssl-error-client-certificate-rejected%E2%80%9D-when-other-browsers-work.html Does anyone knows how to solve this?

I'd really appreciate your help.

edit: Seems to be the same problem: https://superuser.com/questions/231695/iis7-5-ssl-question-safari-users-get-a-prompt-of-certificate-to-select

Community
  • 1
Philipp
  • 21
  • 1
  • 3
  • Go to IIS - click on website - click on ssl settings - select option to ignore client - click apply. works :) – batman Jan 21 '15 at 18:53

3 Answers3

1

Although the webserver is set to accept certificates, have you:

(A) created a trust relationship to the client certificates in question on the server?

(B) created mappings to those specific certificates on IIS?

(C) created a trust relationship to the server certificates in question on the clients?

(D) ensured that the safari clients have an updated list of root CAs, having a path back to above certificates in question?

References:

A - http://forums.iis.net/p/1166684/1940339.aspx

B - http://learn.iis.net/page.aspx/478/configuring-one-to-one-client-certificate-mappings/

C - Depends on the operating system in question. Safari on Windows uses the Windows trust store, for OS X http://docs.info.apple.com/article.html?path=Mac/10.5/en/11871.html

D - http://www.techrepublic.com/blog/mac/managing-ssl-certificate-authorities-on-os-x/314

Brennan
  • 1,388
  • 6
  • 18
1

I had this issue with a Windows Server 2008 R2 Datacenter IIS. The solution to my problem was to:

  1. Open up your server remotely
  2. Start your IIS manager
  3. Under the left Connections panel look for the domain that is giving you the problem with the SSL
  4. After locating and selecting it click on SSL Settings
  5. Under Client certificates choose Ignore
  6. Click Apply Under the Actions section on the right

Done.

Waqleh
  • 111
  • 4
0

The OP in the Super User question that was linked has solved this:

OK, that does resolve this issue. Safari is the only browser which prompts the certificate selection. It isn't even required in IIS. Strict apple ppl :P but setting SSL client certificates to ignore does resolve it.

Seems like Accept means that it will check it and Ignore that it won't check it.

So I think "ignore" means "accept the certificate" and "accept" means "check the certificate".

Community
  • 1
Tamara Wijsman
  • 388
  • 2
  • 4
  • 16