Tag Info

New answers tagged


From a basic usage point of view, difference is how resulting TrustManagers are initialised, as per Java Cryptography Architecture Oracle Providers Documentation for JDK 8 SunX509: A factory for X509ExtendedTrustManager instances that validate certificate chains according to the rules defined by the IETF PKIX working group in RFC 3280 or its successor. ...


Now we have upgraded openssl to openssl1.0.1 to support TLSv1.2. So, do I need to create a new X.509 certificate to support TLSv1.2? A SSL/TLS server certificate asserts the identity of the server. This certificate is independent of the SSL/TLS protocol version. The SSL/TLS version is negotiated during the connection, before the certificate is ...


First of all, I hope you are not using OpenSSL1.0.1 on your server because it is vulnerable to HeartBleed. Before answering your question, let us see some of the main elements in an X.509 certificate (from RFC 5280): Certificate Version Serial Number Algorithm ID Issuer Validity Not Before Not After Subject ...


No. You don't have to. It's mainly the cipher suits that differ between tls 1.2 and 1.0

Top 50 recent answers are included