https client certificate logout/relogin

前端 未结 3 670
遇见更好的自我
遇见更好的自我 2021-02-04 04:07

I have a web site using ssl certificate authentication. How to force the web browser from the server to ask again the certificate to be used? It would be useable for logout, but

3条回答
  •  粉色の甜心
    2021-02-04 05:01

    For logout read this post: https://security.stackexchange.com/questions/36853/is-it-possible-to-force-a-new-ssl-session#

    On the client side, SSL sessions are normally kept in RAM. Internet Explorer, for instance, internally consists of several process that talk to each other, and you have to kill them all to make it forget a SSL session (in practice, this happens only when you have closed all the IE windows).

    An alternative can be close browser with javascript.

提交回复
热议问题