How to get the private key digital signature?



Hi,

My web application does user authentication through X.509 digital
certificates in combination with user name and password.

When the user applies for a digital certificate from my certification
authority (CA), I have a VBScript code that generates a public/private
key pair with the RSA algorithm, as well as the certificate signing
request (CSR) in PKCS#10 format. I assume that the key pair should be
maintained by the browser (my application support Internet Explorer
only at this moment). Am I right?

Now, when the user tries to log into his account, I would like to have
my web application receive a digitally signed token from the client.
The token can be the client's username signed with his/her private
key.

Since this signing process will happen on the client side, it can only
be handled by client side script, for example, JavaScript.

But, how do we get access to the private key with JavaScript? Thanks
a million.

AL

.



Relevant Pages

  • How to get the private key for digital signature?
    ... When the user applies for a digital certificate from my certification ... I assume that the key pair should be ... Since this signing process will happen on the client side, ... how do we get access to the private key with JavaScript? ...
    (comp.lang.javascript)
  • RE: AT_SIGNATURE and AT_KEYEXCHANGE
    ... The certificate EXTENSIONwill tell what the key is valid for. ... private key is valid ONLY for signature than it will be set as AT_SIGNATURE. ... key pair and one cert. ...
    (microsoft.public.platformsdk.security)
  • Re: Expired Recovery Agent EFS Cert
    ... I may be wrong but I believe cipher /u may be user specific. ... RA certificate to see exactly what certificate it is referring to. ... The link below is on EFS best practices though you are already doing the ... > What I did was generate a new key pair using cipher /r and then added it ...
    (microsoft.public.win2000.security)
  • Windows 2003 CA bug?
    ... I'm encountering a problem attempting to import a key pair to use as ... generate the key pair and certificate" ... Windows created PFX file. ...
    (microsoft.public.security)
  • Re: CDP in root certificate when renewed
    ... Renew the CA certificate again with the existing key pair. ... The bug is that the CA does not read the capolicy.inf file during renewals with a new key pair. ... THe renewal with the same key pair will read the capolicy.inf file and remove the CDP once again. ...
    (microsoft.public.windows.server.security)