Silverlight 2 can pass client certificate
When we started working with Silverlight 2 Beta 1, we’ve noticed that there is a problem accessing services which reside on a secured server (secured with CheckPoint Secure Remote) – The silverlight client just didn’t pass the client cerificate needed to access the server.
The solution to this was to access all our services from JavaScript, because IE can pass the client certificate to the server. This of course caused us to start thinking on how to write a framework that will allow calling a JavaScript proxy as easy as calling a proxy in C#.
Today, I’ve found a post mentioning an important new feature of the RTW version – calling secure (SSL) services from silverlight 2. This feature mainly allows calling https services while your XAP resides on an http address (kind-a cross domain problem), but more important – silverlight can now pass client certificates to the other server (whether is https or http secured with a smart card).
After putting the clientaccesspolicy.xaml file on the server, we’ve tried again to call a secured server from our client, and voila, it worked !!!
Another security problem solved.