API and DOD Client Certificates

ZacOdom

Hi All,

We have an ArcGIS Server providing REST endpoints behind a reverse proxy.  We're protecting the rest endpoint and out put directories by requesting a client certificate (DOD CAC) for access.  We're also providing a permissive crossdomain.xml file which is also protected by requiring a client cert. 

We can access everything (service endpoint and crossdomain.xml) after being prompted for and providing a client cert.  We can also access the service via a JavaScript API viewer.

The problem comes in when we try to access the service via FLEX.  We get a sandbox violation when trying to access the service (Error #2048).  We never get prompted for the client cert.  The error looks to me (ex-.NET dev, current manager type) to come from the ESRI api versus the application code.

We did a traffic trace and it looks like FLEX is choking on the "REQUESTCERTIFICATE" piece that the server sends to the client.

Thanks in advance for any help you can provide.

ChristinaMcCullough

Was this question answered?  I am having a problem consuming services that are,  CAC enabled in my Flex Viewer.  We are migrating to a JavaScript viewer, However, our Flex Viewer is very complex , therefore, it will take some time to replicate the application.