TLS 1.2 Client Certificate Authentication
ashr <[email protected]> Thu, 27 Jul 2017 14:50:19 +0200
| Newsgroups | gmane.comp.gnome.mono.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi guys, I've been trying to connect to a threat repository to suck intel feeds down with Mono. The interface use a client certificate and basic authto validate the connection. I've played with mono versions from the version that comes with Xenial, all the way through to Mono JIT compiler version 5.0.1.1. The furthest I've come was on the latest version, I can see it at least tries to speak TLS 1.2, but something goes wrong before the Client Key Exchange, (so I'm guessing the Server Key exchange fails, wild guess from wireshark caps, I'm not an expert in SSL handshakes). This is the code I'm using to set this connection up:*https://pastebin.com/Ei3bsjdF* * The MyRemoteCertificateValidationCallback validates the server cert without errorand Mono seems to add the client certificate to the request just fine as well. A paste with the error that occurs during runtime (SecureChannelFailure (Syscall)): *https://pastebin.com/sUXQf9KF* Screenshot of wireshark cap of the connection process: *https://imagebin.ca/v/3UjPy99nEI94* Screenshot of a wireshark cap of a working connection through python (Using the same client side certificate connecting to same backend): *https://imagebin.ca/v/3UjQdz43jKSQ* * * When I get some time tonight and during the weekend, I'll try set up a server with client side auth and test it locally as well, but if any of you gurus have an idea of what is going wrong or how to troubleshoot further, please let me know ? Many thanks ash _______________________________________________ Mono-devel-list mailing list [email protected] http://lists.dot.net/mailman/listinfo/mono-devel-list