Retrieving client certificate

Hi to all!!!!

I'm using IIS 6.0 with SSL enabled, requiring client certificate to get access.

The configuration works properly; IIS requires the client certificate and connects to a Web Application programmed in Java deployed in a WebSphere Application Server.

The Web Application has a filter that must parse the client certificate. The problem is that I can't find the certificate, nor in the request, nor in the header.

I have several questions:
- Does IIS publish the client certificate anywhere, and how can I retrieve it?
- The communication between IIS and WAS is not SSL. Should it be SSL or I'll have problems with session management if I do that?

Thanks in advance and best regards.

Hi ,
Chk out these , might help ........

SSL and Certificates (IIS 6.0)
--------------------------------------
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5d0fb4c2-3333-4fec-82fc-6e15d3733937.mspx?mfr=true

How to configure Certificate Server for use with SSL on IIS
http://support.microsoft.com/kb/218445/EN-US

Certificates (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/89c7ef2f-f7d6-483c-8b08-ae0c6584dd4d.mspx?mfr=true

Secure Sockets Layer: Protect Your E-Commerce Web Site with SSL and Digital Certificates
http://msdn.microsoft.com/msdnmag/issues/01/04/SSL/default.aspx

Jeethu Joseph
IIS/Asp.Net Engineer Microsoft.