[Mono-bugs] [Bug 76258][Nor] Changed - SSL client certificate doesn't work with IE.

bugzilla-daemon at bugzilla.ximian.com bugzilla-daemon at bugzilla.ximian.com
Thu Sep 29 05:57:52 EDT 2005


Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by yngve.zackrisson at mobila-kontoret.se.

http://bugzilla.ximian.com/show_bug.cgi?id=76258

--- shadow/76258	2005-09-28 16:45:05.000000000 -0400
+++ shadow/76258.tmp.5241	2005-09-29 05:57:52.000000000 -0400
@@ -158,6 +158,41 @@
 
 In the mean time I would appreciate if you can test, without the
 signature check. That way if you find anything else I'll be able to
 fix it before the testing.
 
 Thanks.
+
+------- Additional Comments From yngve.zackrisson at mobila-kontoret.se  2005-09-29 05:57 -------
+OK. I will try to uncomment and run. 
+(Currently I only run the binaries. I have never compiled from svn) 
+
+---
+
+I still whonder why I get the message : 
+V5
+        error #-2146762486
+V9
+
+According to code (TlsServerCertificate) error 
+-2146762486 means that WinError.h CERT_E_CHAINING 
+(X509ChainStatusFlags.PartialChain and 
+ AlertDescription.UnknownCA).
+
+To me it seems that there is somethings wrong with 
+the chaining of the server cert to the CA.
+AFAIK, Mentalis have similar problems if the PKCS#12 
+is loaded from file. 
+If the PKCS#12 is loaded from the Windows store 
+it seems to work ok in Mentalis.
+
+Could it be similar problems with the solution I have.
+
+In mssslserver2.cs, I actually have to instantiate a 
+new X509Certificate, based on the Mono Certificate's RawData, 
+to ultimately get the X509Certificate that I need as a parameter 
+in the instantiation of the SslServerStream.
+Would not the "linking" to the CA get lost on the way?.
+
+
+
+


More information about the mono-bugs mailing list