diff --git a/Information.md b/Information.md new file mode 100644 index 0000000..ca7d35c --- /dev/null +++ b/Information.md @@ -0,0 +1,43 @@ +--- +title: SSL/TLS +description: +published: true +date: 2025-09-28T14:42:56.701Z +tags: +editor: markdown +dateCreated: 2025-09-28T14:42:56.701Z +--- + +# SSL/TLS + +## CA +A provider which can sign certificates. + + +## Certificate + +The CA provides a certificate and signs it with a digital signature using the private key of the CA. + +``` +f(certificate, CA Private Key) = signature +``` + +An SSL/TLS certificate (X.509 cert) contains + +* The server’s public key +* The domain name(s) it’s valid for +* Validity period (start/end dates) +* Extensions (like usage constraints) +* A digital signature made by the issuer (CA) + +The client request a certificate from a server and checks that the resulting hashes match. The CA public key is knwon to the browser prior. + +``` +f(signature, CA public key) = result hash +``` + +``` +hash(certificate) = result hash +``` + +The the client uses the Servers public key taken from the CA certificate and sends a messages which can only be correctly decoded if the server has the correct private key \ No newline at end of file