Saturday 23 March 2024

MTLS SSL handshake before https connection established


The client certificate exchange happens during the SSL handshake, before the HTTPS connection is established. It all happens in the browser at layer 5 while your application is working at layer 7. You can't affect client certificate exchange in JavaScript at all.

If the exchange is not happening there is a configuration issue on the server or in the browser. If the client certificate is installed in the browser, it will automatically be sent in response to a matching client certificate request from the server. If that's not happening then something is

https://stackoverflow.com/questions/28033824/sending-client-certificate-via-javascript#:~:text=You%20can't%20affect%20client,certificate%20request%20from%20the%20server.

No comments:

Post a Comment