Linked Questions
48 questions linked to/from SSL Certificate framework 101: How does the browser actually verify the validity of a given server certificate?
5
votes
3
answers
7k
views
How does the Certificate Authority work [duplicate]
I'm learning how the Certificate Authority work and have a question.
As my understanding, the Certificate Authority can guarantee that the client get the true public-key:
Saying that I'm a server and ...
- 321
2
votes
2
answers
352
views
Can Certificate be validated locally [duplicate]
When I establish TLS/SSL with some server he sends me the certificate in the process. The certificate is signed by a certificate authority.
In my PC/browser I have a list of trusted certificate ...
- 163
2
votes
1
answer
2k
views
How does browser verify if SSL certificate is issued by CA? [duplicate]
As I'm studying how HTTPS works, one thing baffled me a lot, that is - How does browser verify if SSL certificate is issued by trusted CA? Do browser verify this by ask CA's server? Or it's just the ...
- 133
0
votes
2
answers
316
views
What is the rationale of binding SSL certificates to a domain name? [duplicate]
As I understand them, SSL certificates contain a domain name, a public key and the giving CA.
Why is it important to include a domain name?
Why isn't it enough that the CA considers the public key as ...
- 103
0
votes
1
answer
629
views
How does a web client check the signing authority of a server certificate? [duplicate]
In HTTP The Definitive Guide
When you establish a secure web transaction through HTTPS, modern
browsers automatically fetch the digital certificate for the server
being connected to. If the ...
- 627
0
votes
1
answer
263
views
Can a site with HTTPS be impersonated if it's visited for the first time? [duplicate]
From https://doesmysiteneedhttps.com/:
"Attackers can still impersonate my site, even if I use HTTPS."
They can try, but as long as your private key stays private, browsers
will show ...
- 163
1
vote
0
answers
346
views
Creating a CA, server and client certs - chain not included? Or how to verify issuer? [duplicate]
I've created a CA, server and client certificates:
# set up CA
openssl req -x509 -config openssl-ca.cnf -newkey rsa:4096 -sha256 -out cacert.pem -outform PEM
touch index.txt
echo '01' > serial.txt
...
- 163
1
vote
0
answers
171
views
Self-signed SSL certificates vs CA-signed certificates [duplicate]
While reading about certificates, I came across this article. It says:
The point of a CA-signed certificate is to give slightly stronger verification that you are actually using the key that ...
- 131
1
vote
1
answer
125
views
HTTPS flow clarification [duplicate]
I have done a small test and result is as expected, but I am trying to understand more.
I have configured a fake DNS server to resolve all names to the IP of my VPS. On my VPS, I installed a web ...
- 113
0
votes
0
answers
72
views
How is a TLS certificate authenticated, down to a code level? [duplicate]
I am having trouble to understand how a TLS certificate is authenticated.
From what I read, a server's leaf certificate contains:
Server domain name
Server public key
Issuer (CA) domain name
Issuer (...
- 101
0
votes
0
answers
48
views
Is a trusted device, on a public network, still vulnerable to a man in the middle attack? [duplicate]
For example, if I am using my personal laptop on a public wifi, and type in the website I want to go to that includes HTTPS, (lets assume https://www.google.com/gmail/) can I reasonably trust that I'm ...
- 543
0
votes
0
answers
33
views
Validate that CA really signed certificate [duplicate]
What is the process of validating that a ssl certificate I try to validate is really signed by CA I trust?
What is the part of the certificate (The one I try to validate) is the one cant be faked?
...
0
votes
0
answers
28
views
How should an application verify a servers certificate? [duplicate]
Im developing an application and i want this application to connect to my server via ssl (using openssl currently). I want this application to verify my servers certificate. The problem is i dont ...
0
votes
0
answers
18
views
How is SSL certificated checked? [duplicate]
When you establish a new SSL connection, during handshake the server sends you his certificate together with public key. Then the browser checks the certificate againts CA. However I do not understand ...
- 1
0
votes
0
answers
13
views
How does the validation occur if the server sends a chained certificate in TLS? [duplicate]
I did search around and find similar questions, however not exactly fitting to my scenario that I am going to discuss...
I have a client machine which have the rootCA certificate installed. The client ...
- 101