IIS cannot verify my client certificate

I've tried setting up SSL for localhost serving my azure web role.

I did what I created my own CA, created a client and server certificate, and then installed them all in the certificate store. The server certificate is located in the personal certificates of the local computer, the client certificate is installed in the current user store under the personal store, and the CA certificate is installed in the trusted root certificates in both stores.

I also configured my IIS website to use SSL and used netsh to bind the server certificate to the ip the site is running on.

However, when I try to access my site through IIS, I get the error:

HTTP Error 403.16 - Forbidden

Your client certificate is either not trusted or is invalid.

      

I know the certificates I am using are being signed out by the same CA, so I really can't see any other reason other than that IIS probably can't access my trusted root store. When I deploy my solution to azure it works without giving me this error, so I'm pretty sure there is a configuration issue with local IIS that I cannot handle.

Any suggestions on what might be the problem here?

+3


source to share





All Articles