ssl - Using browser's certificate (private key) to sign some string in javascript -
my users have certificates (private keys) installed in web browser. these certificates used browser authenticate user on third party websites.
i sign string using 1 of private keys, when user uses/visits my website. there javascript api or function, enable this?
short answer, can't sign string delivered through web browser using java script , client certificate end user.
in case user certificates , keys used tls client authentication:
- during tls handshake server request browser present tls client certificate.
- the browser pick suitable client certificate , establish tls connection.
- once done, server deliver content: html , js, images...
- the browser render page elements.
the browser has api access client certificates , keys not exposed java script engine.
Comments
Post a Comment