API and DOD Client Certificates

Question

Hi All,

We have an ArcGIS Server providing REST endpoints behind a reverse proxy.  We're protecting the rest endpoint and out put directories by requesting a client certificate (DOD CAC) for access.  We're also providing a permissive crossdomain.xml file which is also protected by requiring a client cert.

We can access everything (service endpoint and crossdomain.xml) after being prompted for and providing a client cert.  We can also access the service via a JavaScript API viewer.

The problem comes in when we try to access the service via FLEX.  We get a sandbox violation when trying to access the service (Error #2048).  We never get prompted for the client cert.  The error looks to me (ex-.NET dev, current manager type) to come from the ESRI api versus the application code.

We did a traffic trace and it looks like FLEX is choking on the "REQUESTCERTIFICATE" piece that the server sends to the client.

Thanks in advance for any help you can provide.

ChristinaMcCullough · Answer

Was this question answered?  I am having a problem consuming services that are,  CAC enabled in my Flex Viewer.  We are migrating to a JavaScript viewer, However, our Flex Viewer is very complex , therefore, it will take some time to replicate the application.

DasaPaddock · Answer

Try not requiring the cert for the crossdomain.xml