docs: create Information

This commit is contained in:
Lukas Forsberg 2025-09-28 16:42:58 +02:00 committed by Lukas Forsberg
parent 62a101ff4b
commit 5dbb3fdeb1

43
Information.md Normal file
View File

@ -0,0 +1,43 @@
---
title: SSL/TLS
description:
published: true
date: 2025-09-28T14:42:56.701Z
tags:
editor: markdown
dateCreated: 2025-09-28T14:42:56.701Z
---
# SSL/TLS
## CA
A provider which can sign certificates.
## Certificate
The CA provides a certificate and signs it with a digital signature using the private key of the CA.
```
f(certificate, CA Private Key) = signature
```
An SSL/TLS certificate (X.509 cert) contains
* The servers public key
* The domain name(s) its valid for
* Validity period (start/end dates)
* Extensions (like usage constraints)
* A digital signature made by the issuer (CA)
The client request a certificate from a server and checks that the resulting hashes match. The CA public key is knwon to the browser prior.
```
f(signature, CA public key) = result hash
```
```
hash(certificate) = result hash
```
The the client uses the Servers public key taken from the CA certificate and sends a messages which can only be correctly decoded if the server has the correct private key