Hello,
I’m working on a project, which asks user to select an X509 certificate on client computer for digital signing a document on server.
Is that possible that browser can read from the Certificate store on client machine, like ClientClipboard and ClientFileSystem extensions do?
My current workaround is building a signing module running on client desktop, and push documents needed to sign to the signing module using Rabbitmq.
— Edited by Alaa —
Hi Levie,
Unfortunately, this is not what I’m looking for. I know how to manage Certificate and sign document in my Desktop App. In order to sign a document you need a key pair (public key and private key). Normally people use X509 certificate to keep their key pairs and the key owner’s info.
X509 certificate can be read from a file (1), from User Certificate Store (2) or from HSM server (3). In desktop application, there is no problem at all to retrieve a certificate, where ever they are stored.
But from web browser, only (1) and (3) is easy. (2) is difficult may be due to security reason.
I forgot that I asked this question 4 years ago on this forum in this ticket. Tiago and Frank suggested with some idea, which I currently use in production.
There is one issue that I always want to improve : Current solution requires users to download a small desktop module for signing. This module listen on a RabbitMQ server for any needed to sign document sent from browser.
So, my question is: after 4 years, is there any improvement in Browser API, which allows user to select a Certificate from User Certificate Store on the client machine directly. 4 years ago I though reading clipboard on client machine and send to server is impossible, and now it is easy with Wisej.
//
// <![CDATA[
var intervalId = setInterval(function () { if (MtPopUpList) { LanguageMenu = new MtPopUpList(); var langMenu = document.getElementById(LanguageMenu_popupid); var origLangDiv = document.createElement("div"); origLangDiv.id = "OriginalLanguageDiv"; origLangDiv.innerHTML = "ORIGINAL: “; langMenu.appendChild(origLangDiv); LanguageMenu.Init(‘LanguageMenu’, LanguageMenu_keys, LanguageMenu_values, LanguageMenu_callback, LanguageMenu_popupid); window[“LanguageMenu”] = LanguageMenu; clearInterval(intervalId); } }, 1);
// ]]>
Hi Tung,
Is this what you’re looking for? https://stackoverflow.com/questions/35898908/sign-a-file-with-a-x509certificate2-and-private-key. You can use the Upload control or the ClientFileSystem extension to retrieve the X509 certificate from the client.
HTH,
Levie
Please login first to submit.