I would like to establish a secure connection between two servers (Alice and Bob) via Mutual TLS authentication.
- Alice provides Bob a certificate signed by CA
- Bob provides Alice a self-signed certificate (p12)
Suppose Alice’s trusted root CA is compromised and would be able to issue a fraudulent certificate which matches Alice. What would such certificate be able to achieve, specifically about MITM type attacks?
My assumption is that nothing can happen because the attacker (fake Alice) is missing Bob's certificate to establish the connection in the first place. Is that correct?