I am new to SSL / digital certificates / signatures.
What I know is that a digital signature must be verified/decrypted using the public key.
So a cert that is signed by a CA must be verified/decrypted by using the CA's public key which are installed in most browsers.
But how about a self-signed certificate? How does a client get the public key to verify/decrypt the self-signed certificate?
Is this the scenario where the browser will prompt that the certificate is from untrusted source and require the client to trust it?
By trusting, does that mean that the digital signature of the certificate is no longer verified? And that the cert is used directly ?
In the link above, is "server key" a private key or public key? Its seems like the "server key" is used throughout the generation of the certificate.
I would have thought that a "public key" will be stored in the certificate and the certificate will be signed by a private key.