'ASP.NET TLS client authentication, how to submit acceptable Distinguished CA Names
How can I configure ASP.NET (Kestrel) to submit a list of acceptable distinguished CA names in SERVER HELLO of the mTLS handshake, to avoid the user to be presented with a list of client certificates in the browser of which most are not applicable?
According to RFC 2246 7.4.4. "A non-anonymous server can optionally request a certificate from the client (...) certificate_authorities: A list of the distinguished names of acceptable certificate authorities."
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|