Re: [foaf-dev] Webid on windows?

--===============2195428016920294064==
Content-Type: multipart/signed; boundary="Apple-Mail=_35743C92-7DF3-4C24-90D8-A55D6042FE7D"; protocol="application/pkcs7-signature"; micalg=sha1


--Apple-Mail=_35743C92-7DF3-4C24-90D8-A55D6042FE7D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Thanks Peter.

Someone on our mailing list had indeed posted a ticket with MS, so the =
bug report you mention
may be the consequence of that going through

"How to use a custom X509CertificateValidator with an IIS hosted WCF =
service and self-signed client certificate"    =
http://support.microsoft.com/kb/2480671

This may be useful for others working in that space.

Henry


On 14 Nov 2012, at 19:02, Peter Williams <[email protected]> =
wrote:

> I updated the http://wp.me/p1fcz8-39F  post, for more on webid.
>=20
> Three new topics:
>=20
> My original post was fault in that I was yet again deceived that some =
server-side code that appeared to process an SSL handshake client =
cert... was in reality processing a layer 7 cert/signature/handshake =
message sequence (of rather similar purpose to an SSL handshake's client =
authn protocol element).=20
>=20
> I then ask: so why IS webid restricted to layer 4 handshakes. Why not =
expand it to layer 7 certs/signatures, too?
>=20
> Then, I find some really good material that shows why windows =
struggles/struggled with webid tied to SSL handshakes. It explains =
theoretically what I found out experimentally last year (and driveled on =
about in the knowledge darkness, remarkably accurately in retrospect). =
The referenced article also suggest fixes  - whose style reinforces the =
conclusion I drew in that darkness:- that overriding kernel behaviours =
for SSL cert handling required/requires rather special coding. What MSFT =
seem to have done ... however... is at least say HOW to do it. Its not =
easy, but its gone from impossible (and no, never) to ... well here is =
how.
>=20
> Would be interesting to know if webid public discussion prompted =
someone to find out what is some esoteric systems stuff.
> ________________________________________
> From: Peter Williams
> Sent: Monday, November 12, 2012 11:46 AM
> To: foaf-dev-RyYwo1q5J+qsOXdr9/[email protected]
> Subject: Webid on windows?
>=20
> webid working on windows? with client cert ;and NO prior registration? =
http://wp.me/p1fcz8-39F via @wordpressdotcom
>=20
> Last year, I could not properly implement webid, since I could access =
the client cert without first having in done way registered it on =
windows. Today I think I did that, making webid interesting again.
>=20
> Could some windows programmer type confirm the result? All one has to =
do is run a std sample (just the right one).
> _______________________________________________
> foaf-dev mailing list
> foaf-dev-RyYwo1q5J+qsOXdr9/[email protected]
> http://lists.foaf-project.org/mailman/listinfo/foaf-dev

Social Web Architect
http://bblfish.net/


--Apple-Mail=_35743C92-7DF3-4C24-90D8-A55D6042FE7D
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_35743C92-7DF3-4C24-90D8-A55D6042FE7D--

--===============2195428016920294064==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
foaf-dev mailing list
foaf-dev-RyYwo1q5J+qsOXdr9/[email protected]
http://lists.foaf-project.org/mailman/listinfo/foaf-dev
--===============2195428016920294064==--