Tag Info

New answers tagged

15

CA does not issue private keys to anybody. CA signs (using its own private key, which is kept very secret) your public key. The CA has no access to your private key at all. If the CA’s private key is leaked to Mallory, Mallory is able to issue valid certificates for any name. That means he can make almost undetectable (well, obviously, you can detect the ...


2

So you need either the CA or the client to tell you that the certificate was renewed. I can guess there are a few ways to approach this... Renewal + Same Subject A client holding the old cert and new cert could use the private key of each certificate, and sign the new cert, thus proving they have knowledge of both keys. A server that revokes a ...



Top 50 recent answers are included