"Two way SSL authentication",how i make it work?
Closed this issue · 7 comments
how to present client cer to server?
- Proxy instructions: https://github.com/igrigorik/node-spdyproxy#two-way-ssl-authentication
- Trying accessing any site, and you should get "select a certificate authentication box popup"...
If you're not seeing the popup / proxy connection fails, then the auth step is likely failing.
on my server side: spdyproxy -k /path/mykey.pem -c /path/mycert.pem -p 44300 -V -U user -P pass
actually i can only make it work by "chrome.exe --proxy-server=https://xxxxxx:44300 --ignore-certificate-errors" on my client side.
ps: self-signed certificate
If you're using cert authentication, you shouldn't need the user/pass HTTP auth.
For the proxy certificate.. you need to import it into your trusted root -- you'll have to lookup how to do that on windows. You definitely don't want to run Chrome with --ignore-certificate-errors.
on my server side ,is it nessery to rebuild keychain? i did import key as root on my client side, i still have to add "ignore-certificate-errors" to make the proxy work.
PS: my position China mainland. I encounter "Error: TypeError: Cannot read property 'id' of undefined" on my server side without "ignore-certificate-errors".
thansks for your wonderful job again.
@paway hmm, can you try checking out the latest version of the code from the repo and running that? I thought we fixed the TypeError's... If that's still there, then something's not right. Also, did you generate your own cert?
https://github.com/igrigorik/node-spdyproxy#securing-the-proxy
yes, exactly step by step. i will try again and report. thanks for your wonderful job again!
I have made it work. Thank you!