Safari, IIS and optional Client Certificates

iis-7.5safarissl-certificate

I've a ASP.Net Webapp running on IIS7.5. The Webserver is configured to accept Client Certifcates. Unfortunately Visitors with Safari Browser are unable to view the Page.
Same Problem as described under the following link:
http://www.mnxsolutions.com/apache/safari-providing-an-ssl-error-client-certificate-rejected%E2%80%9D-when-other-browsers-work.html
Does anyone knows how to solve this?

I'd really appreciate your help.

edit:
Seems to be the same problem:
https://superuser.com/questions/231695/iis7-5-ssl-question-safari-users-get-a-prompt-of-certificate-to-select

Best Answer

Although the webserver is set to accept certificates, have you:

(A) created a trust relationship to the client certificates in question on the server?

(B) created mappings to those specific certificates on IIS?

(C) created a trust relationship to the server certificates in question on the clients?

(D) ensured that the safari clients have an updated list of root CAs, having a path back to above certificates in question?

References:

A - http://forums.iis.net/p/1166684/1940339.aspx

B - http://learn.iis.net/page.aspx/478/configuring-one-to-one-client-certificate-mappings/

C - Depends on the operating system in question. Safari on Windows uses the Windows trust store, for OS X http://docs.info.apple.com/article.html?path=Mac/10.5/en/11871.html

D - http://www.techrepublic.com/blog/mac/managing-ssl-certificate-authorities-on-os-x/314

Related Topic