Okay I have read the questions here on how SSL works, but they all focus on symmetric encryption. But I have configured Apache WebServer to use RSA for SSL using the openSSL tool.
Now my question is that how does asymmetric encryption work for SSL ? What goes on behind the scenes ?
My main doubt is that if the browser wants to communicate with the server then it uses the public key given by the server, but if it wants to understand what the server is sending(which in my opinion will be encrypted since it will be in a HTTPS session) how does the browser do that ?
If I am not wrong private keys are not suppose to be shared. So how does this work ?