x.509 certificate-chain signatures verification

Question

Once a client application downloads a leaf certificate file from some entity, issued by a CA, how does the verification of the cert's signatures work?

Specifically, I'm not clear on whether a leaf certificates signature is only crypto validated by that leaf certs public-key (the one that's embedded in the cert), or if in some way the cert of the parent CA is involved in that signature decrypt/verify process.

After the leaf cert is verified, and the app moves up the issuing chain and onto the intermediate CA cert, in the verification of that intermediate CA's signature is the root certs public key involved in some way? or does the app only need the public key of the intermediate CA to verify intermediate's signature?

Answer 1

The wikipedia page Chain of Trust has a good image explaining this:

In words:

• A Certificate Authority's act of "issuing" a certificate is to use its private key to sign the new certificate. This is a statement that "I, the CA, promise that the information in this certificate is accurate and valid". If you trust the CA's public key, then you can trust anything that it has signed.
• The Root CA signs the Intermediate CA, which signs the end-entity certificates.
• This makes a "chain" because if you trust the Root CA's public key, then you can verify the signature on the Intermediate CA. Now you trust the Intermediate CA. Then you can check the signature on the end-entity. Now you trust the end-entity.

Root certificates are a weird exception to the above because they are signed by the same key that is in the certificate (aka "self-signed"). That means there is no pure-software way to verify whether you should trust it or not; you need some human - usually the vendor of your application or OS - to decide which root certificates should be trusted. This list of "trusted roots" is usually shipped inside your application or OS.

---

In practice, cert validation goes the other direction:

• I have an end-entity certificate. Who signed it? Do I already trust them?
• Oh, it's signed by a CA. Is this CA in my "trusted roots" list?
• If yes, we're done (cert validation success)
• If no, then who signed this CA certificate? Do I already trust them?
• and so on until either you hit a trusted root (cert validation success), or you hit a self-signed cert that is not in your "trusted roots" list (cert validation fail).