Timeline for CSR signing follow up question
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 9, 2015 at 14:50 | vote | accept | Pallab | ||
| Mar 9, 2015 at 14:49 | history | edited | M'vy | CC BY-SA 3.0 |
added 1 character in body
|
| Mar 9, 2015 at 14:48 | comment | added | M'vy | Good catch. I'll edit that :) | |
| Mar 9, 2015 at 14:47 | comment | added | Pallab | great, in your earlier comment it is "CSR signed by the CA's public key" so got confused, thanks for help. Also edit it for future reference | |
| Mar 9, 2015 at 14:44 | comment | added | M'vy | Signatures are performed with private key and checked using public key. Encryption is done with public key and decrypted by private key. So your CSR (which embeds your public key) is signed by the the CA private key. You can verify this signature by getting the CA root certificate (which holds the CA public key). This root certificate can be added to the list of the trusted root certificate for automatic checking of signature by most PKI software. | |
| Mar 9, 2015 at 14:40 | comment | added | Pallab | CSR is signed by the CA's public key or its private key? as generally we sign using the private key and encrypt using (partners public key). Also 2nd question is isn't is necessary to add the CA certified certificate to the key store also using the "import CA reply" or its not mandatory? | |
| Mar 9, 2015 at 14:16 | history | answered | M'vy | CC BY-SA 3.0 |