Comments by Mat Hamilton (Top 3 by date)

The logs contain the failure conditions that I expect to see. The problem is context.Fail("Fail reason"); is not doing anything. I even tried to set the principal to null before calling fail. That did not change the outcome. I just need to know how to get the authentication to actually fail when I call context.Fail...

ValidateCertificate looks at the issuer and subject of the client certificate to match them against a list of valid issuers and subject combinations. IT does some other validations as well. I will add the actual implementation to the question above.